Unless you specifically put your email on your user info or sig or any other place, the only place where that is stored on PM is in the internal database, which means that the site would need to be cracked before someone can see your email. And as someone else pointed out, I've yet to see spam through my pm-specific account (see below).