Why is the email exposed to the whole web?