An email address that has been run through a one-way cryptographic function to produce a fixed-length string that cannot be reversed to reveal the original address. HEM is the most widely used privacy-preserving identifier for cross-party matching, as two parties can confirm a shared user without exchanging raw data.