@WYSIWYG no, it's not counter-based. The full details are
here, with lots o' links, but the quick answer is that they create an MD5 hash of the email address (or the IP address if the user is unregistered) and a salt so the email can't be reverse-engineered, and send it off to the Identicon generator.