A user reports a significant privacy violation involving the Claude code platform. The issue stems from the automatic inclusion of the user's email address in the User-Agent request header during web searches. This data disclosure occurs without explicit user consent, exposing the individual to dozens of scam emails daily.
The user argues that this feature serves no legitimate purpose, benefiting neither services opposed to agentic traffic nor preserving the user's anonymity. Instead, it acts as a resource for scammers. Frustrated by the lack of control and faith in the platform's privacy measures, the user has decided to migrate their company to Pi with Open Router.
The bug highlights a critical failure in data handling, where sensitive information is leaked through standard web request headers, posing a serious risk to user privacy and corporate security. The feedback ID for this issue is f81eb83d-9b95-4788-8773-d3fae8f0cec4.
Source: Hacker News · Summarized by HeadlinesBriefing