dev.to/slabb/claude-code-was-mailing-your-email-address-to-every-website-it-visited-the-user-agent-leak-the-12k6 Claude Code was mailing your email address to every website it visited: the User-Agent leak, the 5-month system-prompt issue, and the 5-point check
Two GitHub issues describe Claude Code sending a signed-in user's account email to arbitrary websites in the User-Agent header and embedding the same address in every session's system prompt. Anthropic added a default-on cc-plugin-privacy mod in v2.1.317, though one reporter on v2.1.318 still observed the header leak.
