What Anthropic still sees

What Anthropic receives

• Your conversations, with stand-ins in place of the people and identifiers found.
• Stand-ins stable for you, so your conversations can be linked to each other, showing each name's gender and case, and each value's kept part: an email's domain, a bank, a PESEL's century and sex, a birth year.
• The context around them: what you write about a matter can still point to a person.
• Whatever was not found, such as a name written in lowercase or not in Polish.
• Claude's own reasoning from earlier replies, signed by Anthropic and passed back unchanged.
• One caller id for the whole gateway, in place of the device and session ids your Claude app sends.

What Anthropic keeps of a request is set by its own commercial terms and privacy documentation.

Not replaced, on purpose

• Company names and a city on its own: neither names a person, and a stand-in would change what Claude is asked about.
• Health conditions: Claude would answer about a different condition.
• An address abroad, which the Polish grammars don't read.
• URLs and driving licence numbers; a building number stays beside its replaced street.

Restored in replies

Claude's replies come back with your data in place of the stand-ins, and so do the artifacts and files it creates: Claude Desktop and Claude Code write them on your computer from what the gateway has already restored.

Only a stand-in written as it was sent is restored. A name Claude rewrites, in capitals, as initials or encoded, stays a stand-in, so check the names in a document Claude drafts before you use it.

Refused

To work with a PDF, a DOCX file or an image, paste its text instead.

Anything the gateway cannot read is refused with an error naming where, instead of being forwarded: an image or a document that isn't text, a URL or file reference for Anthropic to fetch, the MCP connector, a container, code execution, computer use, and any field or block type the Messages API grammar does not name. The gateway protects what is written the ordinary way; it does not stop someone encoding data to slip it past.

What the gateway's operator keeps

• Prompts and replies pass through memory only and are never stored.
• Per reply, your email, the model, the token counts and the time, for your budget.
• Per request, the path, the browser's user agent and the referring page; no IP address, query string or tracking script.
• The gateway connects only to Anthropic's API and Google's sign-in.

Who runs it · Questions professionals ask