Anthropic Told Users Their Conversations Were Private. Then Came the Fine Print.

A Hacker News thread titled "Has anyone actually read Anthropic's new privacy policy?" sat at the top of the front page for most of Tuesday before sliding off without the usual velocity — no TechCrunch follow-up, no quote-tweet pile-on, no r/privacy crosspost with four thousand upvotes. Just 340 comments, methodical and grim, from the kind of people who do, in fact, read privacy policies. What they found wasn't a scandal in the traditional sense. It was something harder to write a headline about: a document that uses the word "improve" forty-one times and the word "delete" twice.

The specific clause drawing attention concerns how conversation data may be used to train future models unless users explicitly opt out — a setting buried three levels deep in account preferences, beneath a header called "Data Controls," that defaults to on. On r/ClaudeAI, one user posted a screenshot of the opt-out flow and asked, rhetorically, "How many non-technical users do you think have ever seen this screen?" The post got traction not because it was incendiary but because no one could answer it. The counterarguments in the thread weren't defenses of Anthropic so much as defenses of the genre — "every company does this," "at least it's opt-out and not opt-in-and-hidden," "compared to Meta this is nothing." The comparison to Meta came up in eleven separate comment chains. When "we're better than Meta" becomes the floor of acceptable privacy practice, the floor has moved.

What's happening in this conversation isn't really about Anthropic specifically — it's about a normalization pattern that privacy researchers have been tracking for two years and that is now fully legible to general users. Bluesky's privacy-focused accounts, which spent most of last year treating AI data practices as an abstract threat, are now circulating annotated screenshots. The annotation style matters: these aren't the red-circle-and-arrow posts of outrage culture. They look more like study guides. People are teaching each other to read these documents the way a previous generation learned to read nutritional labels — not expecting to like what they find, but wanting to know.

The opt-out exists, and users who find it can use it. But the structural reality is that most won't find it, which is why it was designed that way. Anthropic is not unique in this, and the Hacker News crowd knows it — which is why the thread felt less like an accusation and more like a collective acknowledgment of a system everyone has already accepted. The next version of this policy, and the one after it, will be more elaborate and harder to parse, because that is what these documents do over time. By the time a regulator looks closely at the opt-out default, the model trained on this data will already be two versions old.