I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my permission. This should not be a setting with opt-out or opt-in behavior, it needs to be removed from the harness entirely. It is not for the good of anyone involved: it does nothing for services which dislike agentic traffic, does not preserve my anonymity on the web, and is a goldmine for scammers. I am migrating my company to Pi with OpenRouter since I have no faith in anthropic preserving my privacy.
Claude Code sends your email address to websites
Bug Description I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my perm...
Key takeaways
Claude Code sends users' email addresses to websites via User-Agent headers during web searches, causing privacy concerns.
- Users report emails being shared with third parties without permission.
- The feature is criticized for harming privacy and aiding scammers.
- A user is switching to another service due to privacy concerns.
Summarised automatically by AI from the original article by Hacker News. AI can make mistakes, so check the original for details.
Story details
- Published
- By
- motoroco
- Format
- Article
- Original
- github.com ↗




