# Claude Code privacy safeguard faces reported enforcement gap

_Published Thursday, November 5, 2026 at 10:53 PM EST · AI, Security · Latest · Tier 2 — Notable_

![Bug Description I receive dozens of scam emails per day because claude code divulged my email to arbitrary 3rd parties in the User-Agent request header while conducting web searches without my perm... — Primary](https://opengraph.githubassets.com/3664b108e3d1a4e6a65597bdb1656a51cae7cb510883fb88fe901b339feb324f/anthropics/claude-code/issues/107757)

A Claude Code GitHub issue reports that the coding agent sent a user's email address to websites in User-Agent request headers. A response in the thread says a built-in privacy module introduced in version 2.1.317 blocks that behavior and is enabled by default.

The response describes a model following a website's requirement for scripted clients to provide a contact email. A subsequent commenter reported that a local command containing the account email and a User-Agent header still ran in versions 2.1.317 and 2.1.318 with the module enabled. That test made no network request.

## Sources

- [GitHub](https://github.com/anthropics/claude-code/issues/107757)

---
Canonical: https://techandbusiness.org/newswire/mLtQduv1jAern_ryYjveGN
Published: 2026-11-06T03:53:29.362Z
Story chronology: 2026-11-05T22:13:15.000Z
Retrieved: 2026-11-06T22:48:23.265Z
Publisher: Tech & Business (techandbusiness.org)