Anthropic's AI coding tool, Claude Code, has drawn privacy concerns after a user reported that it transmitted their email address to third-party websites through HTTP User-Agent headers.
Privacy report · Claude Code
Claude Code reportedly sent a user's email address to third-party sites in HTTP headers
A single user reported that Anthropic's coding tool included their email address in the User-Agent field of outgoing web requests. The claim is unverified, and the scope, cause and company response remain unknown.
1
Reporting user
The claim rests on one person's observation.
?
Users affected
Not established by the available information.
0
Company responses described
No response appears in the material reviewed.
Reported observations vs. what is established
Each block is one reported observation. The dashed column marks what has not been established.
How the reported data path works
Step 1
Claude Code
Makes outgoing web requests
→
Step 2
User-Agent header
Reportedly contains the email address
→
Step 3
Third-party sites
Receive data not meant for them
The User-Agent field normally identifies the browser or client software. A personal email address there would be unusual, since servers do not need it to process a request.
Why it matters
Coding assistants often have access to developer environments, config files and network connections.
A small flaw in how requests are built can expose sensitive information.
Any receiving site could log or store the value.
Still unknown
How many users are affected
Which Claude Code vers Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...