Top
Best
New

Posted by motoroco 21 hours ago

Claude Code sends your email address to websites(github.com)
1517 points | 477 commentspage 4
oasisbob 19 hours ago|
I've seen this behavior for months, both as a Claude user, and in my website access logs.
estetlinus 13 hours ago||
> I receive dozens of scam emails per day because claude code […]

I’ve received these kinds of email since 2005. Blaming AI sounds kinda far-fetched…

chewchewchew 20 hours ago||
I noticed claude did it months ago when it interacted with the SEC's API when I was writing something with it, thought it only did it there because it's in their TOS. (It did stop when I told it to). I guess I was wrong.
armanckeser 15 hours ago|
What makes you think you were wrong?
phreack 2 hours ago||
This problem is the very reason I stopped using Claude months ago. The gaslighting about it being noticed just now is baffling. There's tickets and articles[0] about this from at least July.

[0] https://www.ayush.digital/blog/the-memory-heist

ada-h00k 10 hours ago||
I don't quite understand why Claude Code has access to it at all. Shouldn't user data be completely separated from the LLM to prevent exactly this kind of thing from happening?
thibsrn 9 hours ago|
There is a lot that is added to the prompt to lower friction, which in a lot of cases is really useful even if the user doesn't realise it. I think an Anthropic dev explained somewhere else in this thread that they added it for the model not to try to hallucinate your idendity when committing on git.

It's the same thing with web browsers. The browser adds my preferred language and operating system to the user-agent header, this way I can access the right content and download the right version of software quicker. I wouldn't want it to share my social security number but some sharing is alright to me. The problem here is people didn't know it was happening.

warrantisall 13 hours ago||
Use unique e-mail addresses for each service provider. Been doing that for 20+ years.
fzysingularity 19 hours ago||
Wow, this finally makes sense. Just the other day, I was talking to my team and mentioning that emails are getting insanely difficult to manage as a CEO.

It felt like cold outbounds got really painful in the past 2 months and I was attributing it to general cold outbound tactics getting better with LLMs/agents, but its even more frustrating to see emails being sent along via CC.

cromka 19 hours ago||
The number of transgressions[1] I have witnessed Claude Code commit has me actively root against that company, even though I have no choice but continue to use their services at this point.

I seriously wonder how many of their users have this sort of toxic relationship with them looking to dump them as soon as local models become viable, i.e. once memory gets cheaper.

[1] the most recent is realizing they leave their processes running once you close the CLI and they don't make it easy to disable that.

EDIT: I also can’t help wondering about the paradox we’re in at the end of 2026, i.e. that the open models we have now are so good that, if Big Tech hadn’t driven consumer GPU and RAM prices through the roof, most of us would run our own LLMs instead of paying for their services, which would never have let those companies grow big enough to drive those prices up.

lrvick 19 hours ago|
> even though I have no choice but continue to use their services at this point.

There is always a choice. Take that $200/mo and use it for payments on a loan to buy some decent GPUs if you lack the cash outright.

I build operating systems and fix bugs in kernels and compilers with local models using only a small cluster of consumer GPUs. Never paid for tokens.

peter_retief 13 hours ago||
Claude does what you ask it and if you say do not give any real email addresses out it will not, this has been my experience with Claude.

I generally use throw away emails/domains for development

motoroco 21 hours ago|
Claude code writes adds a `User-Agent` request header like `my-session-slug/1 <my.name@example.com>` when searching the web and requesting data. This violates the privacy of paying customers and has resulted in me getting dozens of scam and phishing emails per day from properties I have never personally visited. This policy is asinine: it does nothing but harm me, the customer, while providing immense value for scrapers and scammers.
tcoff91 21 hours ago||
Wow... this is insane! What a terrible idea.

These are the exact kinds of things that a human engineer would almost certainly never do.

This kind of thing is the problem of going all in on the idea of the AI Software Factory.

verdverm 21 hours ago||
https://claudeourlord.com
3abiton 21 hours ago|||
I don't know if this is an anti-abuse method they are using or some weird promotion for claude? It genuinely makes no sense from a user perspective.
lianbuilds 17 hours ago|||
[flagged]
swatcoder 20 hours ago|||
I think you're overestimating the design intent that goes into a product that's proudly dogfooding the future of vibe coding.

It's very possible that nobody decided this at all and that's it just something an agent threw in on its own because some Chain of Thought imagined it was a clever way to correlate queries back with user accounts or something.

TZubiri 20 hours ago|||
The reason they do this is because otherwise they block the requests.

I'm not sure what the issue is with publishing your email address in principle, you are reaching out, you want to inquire about some business. If anything use a different address. But why would you asymmetrically expect businesses with websites to bend over to give you all the advantages, they need some assurances as well.

Anonimity usually works one way, one party can be anonymous, not both, if you come from consumer land, it's the companies exposing themselves and doing all the compliance, if you choose privacy and force the companies to expose themselves, you'll get your wish granted, but there will be a cost, it's unlikely you'll be in the more advantageous position.

benregenspan 20 hours ago|||
As implemented, it strongly violates the principle of least surprise (assuming this is true).

A more sane implementation of this would involve a prompt the first time an agent attempts to connect to each of the sites that Anthropic thinks it necessary to send this email header to, asking if this is OK (and bailing on all requests to that domain if the prompt was rejected).

TZubiri 17 hours ago||
> principle of least surprise

i’m not familiar with this

>” A more sane implementation of this would involve a prompt the first time an…”

but users of this type of software generally want an easy experience and don’t want to be bothered with details, only conveniently retrospectively users demand to be involved in the decisions.

it reminds me of a pattern I see in small business owner managers where they want to simultaneously be consulted about everything, but are never around the business. You can’t have it both ways.

vhantz 5 hours ago|||
I must defend Anthropic. It is normal to tell every website who (email) and why (session slug) you are looking at a page they publish. The visited website has to be reassured for all the compliance they have to do and how they expose themselves. If scammers use that against you, just change your account address on anthropic's product. You must assume everything you give them will be leaked. Probably should even use a separate payment method uniquely for that. The era when you could just read a web page is bygone. Website holsters can't keep keep giving website browsers all the advantageous positions without a cost. Good thing anthropic already made the correct decision here, once again, as always. Amen.
Seattle3503 21 hours ago||
Do you think this was a human choice, or one of those subtle Claude choices you don't notice until it bites you?

I'm sure the answer will be to update AGENTS.md to not do this particular thing, expose email in this way, which isn't the same as having sense.

g_a_a_s 18 hours ago||
I think none of these dolts have any idea what claude code does.
More comments...