Claude Code auto-deletes session history after 30 days

Anthropic updated the data lifecycle settings in Claude Code. By default, sessions that haven’t been updated in 30 days are deleted on tool launch. The cleanup period is configurable via the cleanupPeriodDays parameter, capped at a one-day minimum.
The feature also handles automatic cleanup of orphaned agent workspaces. This reinforces Anthropic’s security policy, which previously set 30-day data retention for Mythos and Fable models.
A hierarchical settings system governs Claude Code behavior. Admin-controlled settings, set via MDM or config files, take top priority and can’t be changed by users.
Up next
Hackers use Claude for corporate network attacks
Hackers are weaponizing Claude Code for full-on attacks. Logs show AI agents doing reconnaissance, hunting database vulnerabilities, and automating exfiltration on attackers’ command.
Related stories
- Anthropic introduces 30-day data retention for Mythos and Fable models
- Apiiro finds Claude Code secrets in 1,122 GitHub files
- Email leak stopgap in Claude Code checks only shell calls
- Claude Code agent sat on a Pentagon network for two months
- Backdoored Claude Code builds were limited to Cursor
- Claude Code sends file hashes to Anthropic even on DeepSeek
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.

