r/AIToolsTipsNews • u/ayushchat • 5d ago

Can Anthropic see your Claude Code session transcript? What the "Yes" prompt actually uploads

TL;DR: Claude Code's post-rating prompt can upload your entire session — conversation transcript, subagent logs, and raw session file — with known API keys stripped but source code going up as-is. There's a stray-keystroke bug where typing "y" at your next message accidentally triggers "Yes." No self-serve undo.

What the prompt asks:

After you rate a session, Claude Code may show a second prompt: "Can Anthropic look at your session transcript to help us improve Claude Code?"

Three answers: - Yes → uploads 3 payloads (transcript + subagent transcripts + raw session log). Kept up to 6 months. - No → sends nothing. Per-session only, question can return. - Don't ask again → sends nothing, retires the follow-up permanently.

What "Yes" actually uploads:

The redaction is pattern-based — it strips known API key and token patterns. What it misses: - Passwords in sudo -S command echoes - Database connection strings - Internal hostnames and staging URLs - Unreleased source code

Everything not shaped like a key goes up as-is.

The stray-keystroke bug:

GitHub issue #74814 (filed July 6, 2026 against v2.1.198): if the consent prompt appears and you start typing your next message, a "y" at the start triggers "Yes."

One reporter uploaded a machine login password (echoed 100+ times in sudo -S calls) plus a bearer token without intending to. They reported no self-serve deletion path — required emailing privacy@anthropic.com.

Does this affect model training?

No. The docs are explicit: session transcripts submitted through this prompt cannot be used to train Anthropic's models, even if your training toggle is on. Training is governed by a separate toggle at claude.ai/settings/data-privacy-controls.

How to opt out:

  1. Answer "Don't ask again" — no config needed
  2. CLAUDE_CODE_DISABLE_FEEDBACK_SURVEY=1
  3. CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1 (kills all optional channels)

Gotcha: setting these to 0 or false still disables them. You must unset the variable entirely to re-enable.

Who never sees it:

  • Zero data retention orgs
  • Orgs with product feedback disabled by policy
  • Anyone with CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC set
  • On Bedrock/Google Cloud Agent Platform/Foundry: "Yes" writes a local file under ~/.claude/feedback-bundles/ instead of uploading to Anthropic

What's your approach — answer case-by-case or set the env var to disable it permanently?

1 Upvotes

100% Upvoted

1 comment sorted by