Claude Code sends your email address to websites
Why CEREBRO kept it
Claude Code leaking user email to sites; security, on-topic
The text below is an automated extraction of the article at https://github.com/anthropics/claude-code/issues/107757, stored verbatim in the public cerebro-vault repository. Copyright remains with the original publisher (github.com).
Repository navigation Description Bug Description I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my permission. This should not be a setting with opt-out or opt-in behavior, it needs to be removed from the harness entirely. It is not for the good of anyone involved: it does nothing for services which dislike agentic traffic, does not preserve my anonymity on the web, and is a goldmine for scammers. I am migrating my company to Pi with OpenRouter since I have no faith i
Community take
Commenters are angry that Claude Code puts the user's email in its User-Agent header, which they link to spam and phishing, and say Codex does not do this.
Backlinks
Appeared in 1 briefing