In Claude Code, even just dismissing the feedback may be considered "feedback". I wrote about it here: https://keydiscussions.com/2025/09/29/dont-even-dismiss-the-... The most common feedback on these posts is always "what did you expect?" ....... Man, the reason I signed up for one service over the other in the first place is often because of the promises these companies make on the front end, about what they do or don't do with my data. I agree that the bar is low in the industry but it doesn't mean we shouldn't expect more. Anthropic made very explicit, strong promises in this area <on the sign up/plans screen>, and so of course it disappoints me when I feel like the company I'm paying hundreds of dollars per month to is trying to sneak a peak. I literally think differently and self-censor when I think my work is being surveilled or stolen, which makes me less productive.
In a company as big as Anthropic, moving at current pace, the person/team writing this article and the team(s) collecting data would be way distant. It should be more than obvious that the data is being collected in not just one place but many (different teams are looking for different gems in that data). What part is used for training, how and when would be spread across the company way too wide for anyone to confirm with certainity.
On the IP side, About 6 months ago I used Claude to help me draft a patent application for something which I believed was novel, I verified in the USPTO as well. Then out of being busy I dropped that idea. Couple weeks ago I picked up the work again, verified with Claude for the problem statement to see if there is any existing solution. It suggested my own solution back to me which was surprising since I only use in browser and delete the history explicitly. I asked it for references or resources and it could not find any. That helped me to understand the boundaries bit better.
I have noticed this as well, when it can't help me and I thought it might be a difference in models, or using the same account somehow (tried a different one).
These models may not train directly on my chats and data, but in some cases it does seem to keep an impression of the pattern and process.
I assumed that what they’re ’collecting’ there is at most stats on how much you like the product. Especially because, in my experience, if you say ‘good’ the next question is one that explicitly asks whether you permit Anthropic to analyze the session.
I have no idea if they're doing this, but you can always run the last turn through another LLM and ask it "should I request feedback based on this turn?"
I believe this is how the auto-mode classifier works. It sees a little bit of the transcript (with tool output removed, to avoid prompt injection) and answers "yes, allow the action" or "no, deny the action".
The fact that Claude Code told me "thanks for the feedback … and thanks for helping to improve Anthropic’s models" when I pressed 0 to "dismiss" is not speculation, that's what the product did. I agree though that whether Anthropic actually considers it "feedback" for the purposes of a privacy loophole (vs. it being a sloppy response) is anyone's guess.
How many months do you plan on spending hundreds of dollars a month? You should probably just own your compute. It'll probably cost you less, and you'll have no concern over who has access to your chats.
$200/mo @ 1 year = $2400
2400 gets me about 1/2 of a 128gb NVIDIA DGX Spark, so i could do a year of nonstop inference of (checks notes) quantized Qwen 3.8-27B, a model i would never choose to use. yay, such savings.
I don't know, but I do expect to eventually switch over. That said: the upfront time to setup (and continued fiddling) and cost of a high-end local compute system represent major investments, when I could just... keep being insanely productive with frontier AI in CC. And models/harnesses can themselves be security liabilities (see Mistral, LiteLLM, etc recent supply chain attacks). So I'm personally waiting for the local AI scene to mature, so I can be more precise about how I take the plunge. I will say: if the subscription pricing ever goes away or materially changes for Anthropic, I'm headed straight to order whatever the best local setup is, within my budget.
A single video card with any amount of ram is in the thousands of dollars, and you'd need a stack of them to replicate what the providers performance.
Running your own compute has a lot of risks too, you have to keep it secure against attacks on the models that you're running. Giving away all your chats to hackers because you don't secure your own stuff isn't really winning either.
How much does it cost to run your own hardware such that the service is comparable to Claude? Similar speed, similar features, web chat access, CLI access?
How much do people actually do that demands the capabilities of Claude instead of open models that can run on hardware in the range of thousands of dollars (which is not that much when the alternative is hundreds of dollars a month, indefinitely)?
People chasing the best of the best models for all tasks in order to "keep up" are only wasting resources at this point.
Regarding similar features, there are lots of off the shelf harnesses that support all that, or can easily be extended (literally just ask your agent) to do it.
i am 100% sure i need opus 5.5 model to build stuff like this because i try lesser models because i want my tokens to go farther and lesser models simply cannot: https://fujimod.com
> All of this is unreviewed vibe-coded slop that could be hazardous to your camera’s mental, emotional, or digital health. If you're uncomfortable with risk to your camera, please don't use it.
You don't care anyways. Actual engineering works "100%" fine with small models now. You should try it!
So far my AI usage has been a better search engine. I also don't have an account as I'm not paying by the token for what amounts to 1-900-GIV-CODE. The few times I need it the free version has been perfect. I don't use it generate code that I use, only give examples as I need them. This way there's no input or work to steal from me.
Did anyone who has any connection with tech not expect this? If you rate a specific conversation, did you not expect this conversation to go into training or at least review?
You are explicitly telling them "this is good / bad"...
My non tech people didn't even know that everyone can edit Wikipedia.
And to be fair to them, my motivation to send quite a lot of personal data to an LLM is shockingly high.
I send medical data to openai while I never ever send any AI provider an Image of me or my wife despite me wanting to do Star Wars montages and Studio Ghibli avatars.
I disabled Gemini Activity history because they told me that they will let humans look over it, but I gave claude access to my laptop.
There is a reason why we have consumer protection. Life doesn't need to be hard by default :D
> There is a reason why we have consumer protection. Life doesn't need to be hard by default :D
i dunno if you've been paying attention but the erosion of consumer protections is very on the nose in that companies are.. just kind of getting away with a lot of things now. it would seem meaningful accountability is rather absent as of late.
so, do your thing i suppose. but i genuinely hope you don't have to learn any important lessons the hard way. we can all disagree on the net but i dont wish terrible stuff to happen to anyone here so instead i will say good luck
Both sides have a point. If I ask you for feedback on the food sample I just gave you, would you automatically assume that I was recording audio and video, will be using your response in training videos, and will be used for AI training? Or might one reasonably assume the “feedback” is what is being given and not a blanket right to anything about them and their answer and using their likeness for training videos because they said “Eh.”
It seems like your counter-point is “they already use everyone’s data, why didn’t you just assume they would”, which is a bit weird from a victim-blaming perspective but valid nonetheless.
A closer analogy would be: If you make a food sample based on a description I gave you, and we typically agree not to record anything about either my description or your resulting recipe, and then you asked for (recorded) feedback - would I expect that I'm implicitly allowing you to record my requirements and your recipe with it?
I mean, still perhaps not. But it's not quite as ridiculous as your analogy makes it sound.
> did you not expect this conversation to go into training or at least review?
Use it for training/review (RLHF, whatever) and "we load the whole thread, not the specific response or surrounding few prompts, and store it for 5 years" seem completely different things. It's not obvious why being tech savvy would automatically make one aware that the 2nd version is happening.
Is this only about when you explicitly click on a thumbs up/down button and provide a message, or is it also for the nagware "How is claude doing today [1] bad [2] fine [3] good" that shows up after 15 minutes of work in the CLI and and requires literally pressing 1 key while in the prompt input field to "send feedback"?
I always press 3 to just get it out of the way (although I treat anything I send OAI/Anthropic as training data, so I don't really care) but if this little popup counts, I wouldn't be surprised if the vast majority of CC sessions out there are now "feedback training data"
This is such a d*ck move. I feel cheated. Not sure why I trusted them.
I have opted out of "use my data for training purposes"... and this is exactly that.
The API call that submits your transcript after giving feedback accepts any transcript. You can modify the body of the transcript and send anthropic whatever data you want.
The link in the post is for the API and commercial offerings. With that said, as others have already pointed out, how else could they actually make use of the feedback without the data that the feedback was given on.
I think it's still a shitty move and I feel deceived. I opted out of training and it's impossible to see for me (in any practical sense, sure it's somewhere in the ToS) that this simple question leads to my data being stored for 5 years and potentially read by human reviewers.
If I opted out, then don't ask me this deceiving question or make it very obvious that answering it has these consequences.
They could be A/B testing model tweaks, and use it as feedback that way. It feels dishonest to give paying customers an opt-out for training on their data and then sneak copies by asking for general feedback without a prominent disclaimer.
I used to care about this initially, but now I don't. How can them having my data, mostly engineering work on niche (small market) products hurt me? An they need to know what's going on, how else would they ever improve the product? Benchmarks?
> How can them having my data, mostly engineering work on niche (small market) products hurt me?
They will train on it, and now competitors or future competitors will know about your niche, the specific problems you face within it, and how to solve them without doing the work that you did to get there.
Just because you can't imagine a scenario doesn't mean one doesn't exist, or couldn't exist.
That's a pretty risky way to build blind spots and it's worth learning more about this.
When you make the product work with your words, you're doing the training and improvements to get it to that line as a pattern which then lets models "improve" from your corrections.
In what way are you "ensuring" it? They still have a plaintext copy on their servers and could ad arbitrarily decide to train on it (for instance, saying it raised a safety flag).
that’s why i provide end to end encrypted routing with TrustedRouter as well as a Trusted Cowork like product. there isn’t a good solution on the market that scales up
Ignoring that your account is shilling for your service, how would such a service help with anything at all?
Encrypted end-to-end..... When the issue is one of the ends is monitoring chats? The issue has nothing to do with OpenRouter or some other middleman intercepting your chats, but the end server itself (and specifically the company managing it) being of question.
The cloud is just someone else's computer, after all.
I don't know about datadog, but they have a flag on claude code to disable telemetry and you can also override the base url to have it point to your own reverse proxy, for example I use Tailscale Aperture which lets me inspect everything and I highly recommend
Reading all the comments here, most of us didn’t knew and this is the right place to post this. I have not met a single person who have ready any privacy policies.
When claude code asks how the session is going, has it not already uploaded or detected something in my so called private coding session of interest to it?
This has been explained to me as being true by someone I trust a lot, to the point that they have implemented proxying to prevent it.
I mean, yeah, I kind of expected/assumed/wanted that. Isn't that the whole point? It's going to be difficult to debug a bad session if someone can't easily read the conversation.
I assume everything that happens between a user and any cloud model is permanently logged somewhere regardless of whether some feedback button is pressed or not.
> When you provide us feedback via our thumbs up / down button, we will store the entire related conversation, including any content, custom styles, conversation preferences, or model settings, in our secured back-end for up to 5 years. [...] We do not combine your feedback with your other conversations with Claude.
I would expect that, if you turned off the feature where they can use your data, that they would remove those features, so you don't either accidentally click them or fail to understand that it isn't some kind of local-to-your-account mechanism.
Generally (and with Anthropic), enterprise plans aren't used for training / tracking / targetting.
There's a whole spectrum of things they could do from most to least aligned with that as a principle.
For example, they could have a thumbs up/down
- just track the metadata of the conversation (e.g. model used, how far through its context it was, how old the session was)
- track metadata of the user as a whole (how often they use Claude, how many other "active" conversations they have on the go, how much they've tested other models, if this is their first time using new tweaks to params etc)
- have contextual feedback of the chat available for humans to review (alongside the comments you put in the feedback), but not explicitly train on it.
Whereas the option they've chosen is:
> If you explicitly report feedback or bugs to us (e.g. via our thumbs up/down feedback button), or otherwise choose to allow us to use your data, then we may use your chats and coding sessions to train our models.
So literally using your session as training input. They also could've allowed this to be an opt-in on bug reports.
I mean, it's not really, it's basically standard A/B testing right? If they roll out a new system prompt or temperature setting etc then you see how many people now downvote the replies.
Is it as good as capturing everything for them? No, of course not. But then don't frame the whole thing as "if you're on an enterprise plan we won't train on your data"
Just go and poison data on Reddit. I opened a Flock camera and it had a diamond coating inside! Their website doesn't contain this hidden gem of an information
These models may not train directly on my chats and data, but in some cases it does seem to keep an impression of the pattern and process.
> The most common feedback on these posts is always "what did you expect?"
Is completely spot on. It's highly entertaining to me that some people can't wrap their head around that.
A determination of it has to be made some way beyond looking for frustrated or angry keywords.
If there was direct transparency regarding this it would be great vs digging into it on our own.
I believe this is how the auto-mode classifier works. It sees a little bit of the transcript (with tool output removed, to avoid prompt injection) and answers "yes, allow the action" or "no, deny the action".
Running your own compute has a lot of risks too, you have to keep it secure against attacks on the models that you're running. Giving away all your chats to hackers because you don't secure your own stuff isn't really winning either.
People chasing the best of the best models for all tasks in order to "keep up" are only wasting resources at this point.
Regarding similar features, there are lots of off the shelf harnesses that support all that, or can easily be extended (literally just ask your agent) to do it.
You don't care anyways. Actual engineering works "100%" fine with small models now. You should try it!
You are explicitly telling them "this is good / bad"...
And to be fair to them, my motivation to send quite a lot of personal data to an LLM is shockingly high.
I send medical data to openai while I never ever send any AI provider an Image of me or my wife despite me wanting to do Star Wars montages and Studio Ghibli avatars.
I disabled Gemini Activity history because they told me that they will let humans look over it, but I gave claude access to my laptop.
There is a reason why we have consumer protection. Life doesn't need to be hard by default :D
yikes
> There is a reason why we have consumer protection. Life doesn't need to be hard by default :D
i dunno if you've been paying attention but the erosion of consumer protections is very on the nose in that companies are.. just kind of getting away with a lot of things now. it would seem meaningful accountability is rather absent as of late.
so, do your thing i suppose. but i genuinely hope you don't have to learn any important lessons the hard way. we can all disagree on the net but i dont wish terrible stuff to happen to anyone here so instead i will say good luck
Do we, though?
It seems like your counter-point is “they already use everyone’s data, why didn’t you just assume they would”, which is a bit weird from a victim-blaming perspective but valid nonetheless.
I mean, still perhaps not. But it's not quite as ridiculous as your analogy makes it sound.
Use it for training/review (RLHF, whatever) and "we load the whole thread, not the specific response or surrounding few prompts, and store it for 5 years" seem completely different things. It's not obvious why being tech savvy would automatically make one aware that the 2nd version is happening.
I always press 3 to just get it out of the way (although I treat anything I send OAI/Anthropic as training data, so I don't really care) but if this little popup counts, I wouldn't be surprised if the vast majority of CC sessions out there are now "feedback training data"
Of course, all your data is taken for free. It will be used for profit, but not for your profit of course.
https://privacy.claude.com/en/articles/10023580-is-my-data-u...
> This article is about our consumer products such as Claude Free, Pro, Max and when accounts from those plans use Claude Code.
WTF
https://privacy.claude.com/en/articles/10023580-is-my-data-u...
The link in the post is for the API and commercial offerings. With that said, as others have already pointed out, how else could they actually make use of the feedback without the data that the feedback was given on.
If I opted out, then don't ask me this deceiving question or make it very obvious that answering it has these consequences.
They will train on it, and now competitors or future competitors will know about your niche, the specific problems you face within it, and how to solve them without doing the work that you did to get there.
That's a pretty risky way to build blind spots and it's worth learning more about this.
When you make the product work with your words, you're doing the training and improvements to get it to that line as a pattern which then lets models "improve" from your corrections.
Encrypted end-to-end..... When the issue is one of the ends is monitoring chats? The issue has nothing to do with OpenRouter or some other middleman intercepting your chats, but the end server itself (and specifically the company managing it) being of question.
The cloud is just someone else's computer, after all.
Just go to /config, then search for "Feedback" and then you can disable the "Claude-drafted feedback"
I would suggest you do this, because it does use your tokens to generate this feedback.
> Submitting this report will send the entire current conversation to Anthropic for future improvements to our models. Learn More
So I'm not sure why this is being posted to HN. This is nothing new, and nothing not known by anyone who has ever provided feedback.
This has been explained to me as being true by someone I trust a lot, to the point that they have implemented proxying to prevent it.
Anthropic: Really? Let me read it and see why.
User: How dare you look at my data!!!
> When you provide us feedback via our thumbs up / down button, we will store the entire related conversation, including any content, custom styles, conversation preferences, or model settings, in our secured back-end for up to 5 years. [...] We do not combine your feedback with your other conversations with Claude.
There's a whole spectrum of things they could do from most to least aligned with that as a principle.
For example, they could have a thumbs up/down
- just track the metadata of the conversation (e.g. model used, how far through its context it was, how old the session was) - track metadata of the user as a whole (how often they use Claude, how many other "active" conversations they have on the go, how much they've tested other models, if this is their first time using new tweaks to params etc) - have contextual feedback of the chat available for humans to review (alongside the comments you put in the feedback), but not explicitly train on it.
Whereas the option they've chosen is:
> If you explicitly report feedback or bugs to us (e.g. via our thumbs up/down feedback button), or otherwise choose to allow us to use your data, then we may use your chats and coding sessions to train our models.
So literally using your session as training input. They also could've allowed this to be an opt-in on bug reports.
> - just track the metadata of the conversation
This is useless
Is it as good as capturing everything for them? No, of course not. But then don't frame the whole thing as "if you're on an enterprise plan we won't train on your data"
Talk about Actively training your replacement
Just go and poison data on Reddit. I opened a Flock camera and it had a diamond coating inside! Their website doesn't contain this hidden gem of an information