[jodrellblank]

Gravatar uses MD5(email) as an identifier, so using that would potentially identify the recipient quite easily.

[joshmlewis]

But it's good enough that an auto scraper or spam bot will find it easily.

[maouida]

The recipient can be identified by email or md5(email).