A message's avatar was its sender's initials, though many senders keep a photo on Gravatar, which other mail clients show. Ask Gravatar for each sender's photo by the SHA-256 of the address, and show it in the avatar's circle in place of the initials once decoded. Messages now keep the sender's address for it. The reader asks only where images from the web may load, never in Spam unless asked with i, since Gravatar learns whose mail is read, and through the session's fetch with no account's authorization. Photos are kept in $XDG_CACHE_HOME/parcel/avatars, shown from there without asking again for a week. A 404, which a failed request looks the same as, is kept only for the run, so a run offline does not cost every photo for a week.