Thanks. That's a really good point. I have worked on apps/websites where the email address was only used for forgot password emails and you are right, hashing the emails in that situation is a very elegant solution.