In what way are avatars a privacy risk? To display an avatar image, you publish an encrypted version (MD5) of the e-mail address in the gravatar’s image URL. Gravatar.com then decides if there is an avatar image to deliver, otherwise the default image is delivered. The default image’s address is also part of the overall gravatar …