I think they are using Gravatar (https://en.gravatar.com/) to pull them in based on your email as it surprised me for a second when I set it up locally, registered and then my current profile photo was already there.