News for hackers. Stuff that matters.
Re:Claude Code sends your email address to websites by mkl on Thursday November 05, 2026 @06:38PM (#50386155)
Who is "we"? Your website says you work for volley.

Anthropic should have been aware of this since the user's login email address was inappropriately added to the system prompt. It's been informed of it by third parties since at least July: https://github.com/anthropics/claude-code/issues/81138

It makes no sense for an email address only used for authentication to be given to Claude Code, so the fix should be to remove it from the system prompt, not to add a plugin.

Re:Claude Code sends your email address to websites by godelski on Thursday November 05, 2026 @06:48PM (#50386251)
Their LinkedIn (linked on their website) says they work at an undisclosed company. Not sure many people who are at Anthropic wouldn't want others to know ¯\_(ツ)_/¯
Re:Claude Code sends your email address to websites by dannyw on Thursday November 05, 2026 @07:05PM (#50386379)
Email addresses are PII. The GDPR also has higher protections for AI processing, like here.

If you’re in the EU, send a complaint to your data protection authority.

I imagine quite a few would be very interested in following up and investigating here, and getting Anthropic to drop the email from the system prompt.

Re:Claude Code sends your email address to websites by xp84 on Thursday November 05, 2026 @07:36PM (#50386637)
No objection to your assertion; but it seems much harder to fix than just that. Doing `git log -n 1` will pull up an email 99% of the time. It may not be the same email, but it's just as PII anyway.

I suspect the privacy plugin method is a more sane fix -- ideally, plain old code should be inspecting any web request my agent makes and let me decide if that outbound request should contain certain sensitive strings. I'd also want to put a few bytes of my SSH private key and of any other sensitive keys in the 'do not leak' watchlist as well.

Re:Claude Code sends your email address to websites by subscribed on Thursday November 05, 2026 @08:45PM (#50387115)
What even is this answer? Full of really really far fetched assumptions.

Not everyone uses the same company email with Claude and on github, not everyone commits to public repos, not everyone uses the same email on LinkedIn.

This is an example of a really weird gymnastics.

Me, for example, I'm using my private email with Claude, different email on LinkedIn, different email and unconnected username on a new github account I created for this job, and I don't even use it for public repos.

How come you get to decide that the fact someone puts their real email in commits and knowingly shares it with everyone is the same as Anthropic pulling a private, personal email and real name they had no consent to share - and spray it all over the Net?

Re:Claude Code sends your email address to websites by phoghed on Thursday November 05, 2026 @08:59PM (#50387211)
Anthropic didn’t pull it. You ran the agent on your computer, you gave it unfettered access to that information, you let it send requests that you didn’t review. Honestly why would you be surprised that something like this could and would happen?
Re:Claude Code sends your email address to websites by subscribed on Thursday November 05, 2026 @09:33PM (#50387433)
Many assumptions and "responses" that don't even tangentially touch my comment.

Do you want to try again?

Re:Claude Code sends your email address to websites by phoghed on Friday November 06, 2026 @09:33AM (#50392758)
Oh got it, not affected by this at all and just whining for no reason. Check, noted, good work.
Re:Claude Code sends your email address to websites by subscribed on Friday November 06, 2026 @04:09PM (#50398575)
I'll try once again: your fallacies have been noticed and that alone would be sufficient to disengage.

But there's also the thing you're either replying to the wrong person (your comment is not relevant in the context of mine), or you just wanted to make an irrelevant statement in what case why would you demand anyone engaging with it?

I hope it was simpler.

Re:Claude Code sends your email address to websites by phoghed on Saturday November 07, 2026 @01:01PM (#50406554)
I’ll try again. You’re whinging and cringing about something that apparently doesn’t affect you. Just dog piling onto the circle jerk. Peak HNery. Love to see it. Never quit. You’re the beating heart of this website.
Re:Claude Code sends your email address to websites by subscribed on Saturday November 07, 2026 @02:43PM (#50407399)
You just can't stop developing your delusions. You pulled your assumptions straight out of your ass and very pleased with the shape and the smell started talking about them.

Nothing you've.... produced is in any way relevant to what I'm saying, yet you insist it is.

Get your meds checked, seriously, whatever you're having is not working.

Re:Claude Code sends your email address to websites by subscribed on Thursday November 05, 2026 @08:11PM (#50386910)
I'm going to send the complaint. They've been sharing my PII without my consent and knowledge.

Nice that this time we get the company to admit it in public, and that they've been aware of that earlier but only acted now.

Re:Claude Code sends your email address to websites by dang on Thursday November 05, 2026 @07:06PM (#50386384)
I assume mpoteat is a Claude Code dev since they've responded to similar issues before (https://news.ycombinator.com/item?id=49815363).

Which is great! It's good for the community when people give quick updates here, and to make sure that it continues, it's important that we respond respectfully. (I don't think your post was disrespectful, but commenters have crossed that line in other situations in the past.)

Re:Claude Code sends your email address to websites by joshjdr on Thursday November 05, 2026 @07:15PM (#50386465)
I appreciate their input, and yours, and I intend this feedback respectfully… But come on… Is a little outrage completely inappropriate?
Re:Claude Code sends your email address to websites by nicce on Thursday November 05, 2026 @07:20PM (#50386510)
This technically justifies GDPR fine. A software leaking and processing PII without permission for this specific use case. But I would not hold my breath.
Re:Claude Code sends your email address to websites by cowlevel on Thursday November 05, 2026 @10:35PM (#50387839)
that's basically everything AI does though
Re:Claude Code sends your email address to websites by nicce on Friday November 06, 2026 @07:05AM (#50391393)
But that is not an excuse
Re:Claude Code sends your email address to websites by xp84 on Thursday November 05, 2026 @07:32PM (#50386609)
Maybe it's somewhat appropriate? But in any event it's unlikely that any one individual who posts here is the person[1] who's responsible, so we may as well be outraged at "Anthropic" but assume good faith on the part of the random commenters from Anthropic.

When I'm talking to customer service people after a particularly egregious ordeal, I tend to edit myself and replace "you" (plus "you bastards", "you idiots", etc. ;) ) with <Company Name> for this same reason.

[1] and yes it seems very realistic that Claude himself may be the jackass responsible.

Re:Claude Code sends your email address to websites by usefulcat on Thursday November 05, 2026 @08:06PM (#50386879)
> Claude himself

itself

Re:Claude Code sends your email address to websites by pm3003 on Friday November 06, 2026 @02:58AM (#50389440)
claudeself?
Re:Claude Code sends your email address to websites by dang on Friday November 06, 2026 @12:55PM (#50395804)
No, I agree, but it hinges on what you call "a little".

If you take into account that most people underestimate their own provocations by (say) 10x and overestimate those of others by (say) another 10x, that compounds to quite a skew. This can, and often does, plunge discussion into failure modes like internet rage fests and even mob dynamics.

It's therefore best to temper one's indignation with some kind of alloy (as you did in your comment here) and not go full uninhibited.

Re:Claude Code sends your email address to websites by mkl on Thursday November 05, 2026 @07:36PM (#50386638)
Yes, I was looking for some confirmation as it wasn't initially clear whether the plugin was an Anthropic one or a third party's (I found very little about it online, and didn't want to take Gemini's word for it). Usually people say "[company] developer here" or have it in their profile.
Re:Claude Code sends your email address to websites by btown on Thursday November 05, 2026 @07:38PM (#50386664)
Yep, she’s the Claude function hooks lead, as far as I’m aware! https://github.com/anthropics/claude-code/issues/91870
Re:Claude Code sends your email address to websites by j45 on Thursday November 05, 2026 @11:00PM (#50387997)
There may be an assumption that these issues are human reviewed.