Should be `email_hash` or something like that, as it's not the user's email.