There is no reason you can‘t have a deterministic function which generates a hash for the user. A simple sha256(lower(email)) is equally secure as a complete r

There is no reason you can‘t have a deterministic function which generates a hash for the user. A simple sha256(lower(email)) is equally secure as a complete random salt, the only requirement on a salt is to be unique.