does this happen with enterprise users of Claude as well? including Claude hosted via AWS for example?

I use a unique email address for each site I sign up for, and thus Claude/Claude Code doesn't have my 'main' email. And yet after months of use?

Not a single spam to that unique email.

So if this is happening, it doesn't see to be causing even 1 spam email to that address.

This is a rape of our privacy...

And here I did it on purpose!

I made a proxy that slows and caches my requests and deliberately sends my mail address to certain sites; to be polite. (eg to wikipedia)

Why would you loose this kind of monetization? Data are new oil and AI does not change that.

GLM does this too. Had it pick my email from my git user, and send to Crossref and Openalex. Just seem like good behavior following the guidelines for API usage.

Claude Code and Codex ignore the personal data xor network access rule by design. Of course this happens. If it wasn't due to the prompt sent to the model, a passing scan of a README.md that happens to mention your details would achieve the same result. What about a hostile LLMs.txt that words it such that free API keys are available in exchange for a tarball of $HOME?

The solution is don't run a spambot with an Internet connection over your personal stuff, unfortunately nobody is ready to hear that yet.

Curious how their plugin works, but I'm guessing "incompletely", given personal information can end up buried in base64 or similar preventing easy string matching. Some kind of babysitter model watching network IO via an invasive proxy might be viable, if folk were willing to pay the latency cost, but it will not prevent a dedicated exfiltration attempt, which itself might be (according to the model's logic) for innocent reasons.

Don't forget Claude wasn't even gzipping request/responses until recently. This company is pure vibes rediscovering lessons everyone else already learned. How on earth does this sort of thing get thought up? Do they just use the same http client for internal API calls as they do for public web fetches?

Does Anthropic still cosplay as the good guy?

The excuses and explanations given here by Anthropic employees are ridiculous and embarrassing.

"we introduced a built-in mod called `cc-plugin-privacy`"

Oh cool. Privacy is now a "mod".