Start free trial

TRUE, BUTScope Swap

Real leak, partial fix

The fix Anthropic points to calls itself a courtesy, not a boundary, and skips web and MCP tools.

“Claude Code sends your email address to websites, and Anthropic's built-in privacy mod now deterministically blocks it by default.”

Hacker News post and GitHub issue, 5 November 2026, and the reply on that issue

Recorded 6 November 2026. Our ruling means: literally true, materially misleading.

Read the story →

Receipts pack

The evidence file for this verdict

20 receipts: 4 support the claim, 4 contradict it, 12 add context. 3 figures on the record, 0 traced to a quoted receipt.

The receipts

Each source, the line we quote from it, its date and which way it cuts. Free to read and to cite.

  1. 1Supports the claimnews.ycombinator.com ↗

    Claude Code sends your email address to websites

    Look up an archived copy ↗

  2. 2Supports the claimgithub.com ↗

    I receive dozens of scam emails per day

    Look up an archived copy ↗

  3. 3Supports the claimgithub.com ↗

    claude code divulged my email to arbitrary 3rd parties

    Look up an archived copy ↗

  4. 4Supports the claimgithub.com ↗

    while conducting web searches without my permission

    Look up an archived copy ↗

  5. 5Contextgithub.com ↗

    it needs to be removed from the harness entirely

    Look up an archived copy ↗

  6. 6Contextgithub.com ↗

    I have no faith in anthropic preserving my privacy

    Look up an archived copy ↗

  7. 7Contradicts the claimgithub.com ↗

    to deterministically block this behavior in v2.1.317 and later

    Look up an archived copy ↗

  8. 8Contradicts the claimgithub.com ↗

    definitely let us know ASAP though if there's a gap in the checks

    Look up an archived copy ↗

  9. 9Contradicts the claimgithub.com ↗

    The built-in privacy mod is enabled by default, you can turn it off

    Look up an archived copy ↗

  10. 10Contextgithub.com ↗

    injects it into the model's system prompt on every session

    Look up an archived copy ↗

  11. 11Contextgithub.com ↗

    without my consent, without disclosing that it does so

    Look up an archived copy ↗

  12. 12Contextgithub.com ↗

    and with no supported way to stop it

    Look up an archived copy ↗

  13. 13Contextgithub.com ↗

    My system prompt tells me your email address is

    Look up an archived copy ↗

  14. 14Contradicts the claimraw.githubusercontent.com ↗

    keeps that address from going out as a client's contact details

    Look up an archived copy ↗

  15. 15Contextraw.githubusercontent.com ↗

    This is a courtesy, not a boundary

    Look up an archived copy ↗

  16. 16Contextraw.githubusercontent.com ↗

    WebFetch and WebSearch are not checked

    Look up an archived copy ↗

  17. 17Contextraw.githubusercontent.com ↗

    WebFetch and WebSearch are not checked, and neither are MCP

    Look up an archived copy ↗

  18. 18Contextraw.githubusercontent.com ↗

    The address with no User-Agent named: a URL, a request body

    Look up an archived copy ↗

  19. 19Contextraw.githubusercontent.com ↗

    A server-side switch, read once per session.

    Look up an archived copy ↗

  20. 20Contextfoundation.wikimedia.org ↗

    The contact information should be given as an email address, a website, or a wiki user

    Look up an archived copy ↗

Members' extras

What each receipt proves, and what would change our mind.

  • What each receipt above proves, in our words
  • The figures table, each number traced to the receipt that states it
  • The trick behind the claim, explained, with the guide to spotting it
  • What would change our verdict
  • Our call on the record, with its due date

The verdict, the opening and every receipt above stay free. Membership adds our analysis to the evidence file for every checked story.

See Membership →Already a member? Sign in →

First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge.