Claude Code sends your email address to websites
Bug Description
I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my permission. This should not be a setting with opt-out or opt-in behavior, it needs to be removed from the harness entirely. It is not for the good of anyone involved: it does nothing for services which dislike agentic traffic, does not preserve my anonymity on the web, and is a goldmine for scammers. I am migrating my company to Pi with OpenRouter since I have no faith in anthropic preserving my privacy.
Environment Info
- Platform: darwin
- Terminal: tmux
- Version: 2.1.318
- Feedback ID: f81eb83d-9b95-4788-8773-d3fae8f0cec4
Reacted by Klughertz Jonathan, Netkas, Sebastian Hooker, ryanlsmith, Tyler Coffman, InventorBlack, TacoDevs, Luis Diaz, Dan Avery, wei and 48 more
Reacted by osintbob and David Reed