Shared Claude chats appeared in Google Search. Here is how to check and remove yours

A link intended for one friend became a public web page

You ask for advice about work, share the conversation with someone you trust and forget the link exists. Days later, that thread can surface in Google or Bing. That is what several Claude users discovered over the weekend.

The distinction matters: Anthropic did not publish everyone's private chats. Claude conversations are private by default. The affected pages were snapshots that users deliberately turned into public links with the Share button, then posted somewhere a search engine could discover.

WIRED found indexed conversations about political affiliation, legal ethics and erotic roleplay. Axios also found documents, business plans and infrastructure diagrams built as Claude artifacts. It could not verify their authors or contents, but the privacy risk is plain enough.

Anthropic told crawlers to stay away, but its second lock was missing

Anthropic blocked the shared-chat directory through robots.txt, the file websites use to ask crawlers not to visit certain pages. The problem is wonderfully mundane: a request is not a lock.

Google's developer documentation warns that a URL blocked by robots.txt can still appear in search when other pages link to it. Google recommends a noindex tag or equivalent response header. WIRED found neither on the Claude pages it inspected.

Google stopped returning the conversations WIRED found through the obvious query, while Bing still showed roughly 612 results during the outlet's check. Anthropic told Axios it does not provide search engines with chat directories or sitemaps and that a link only becomes discoverable after somebody posts it somewhere crawlable. Technically true. Not especially comforting.

How to review every Claude chat you have shared

Open Claude, go to Settings, choose Privacy and find Shared chats. Select Manage to see the title, date and URL of every public snapshot. Hit Unshare beside anything that should no longer be accessible. Anthropic documents the process in its official help article.

Revoking access disables the latest snapshot. Uploaded files and raw MCP tool data are not included, but the conversation, Claude's answers and visible artifacts are. Team and Enterprise users can only share within their organisation.

If the panel says there is no shared content, you have no active snapshots. If it lists anything, inspect it for names, email addresses, code, client information and every other detail that felt harmless inside a chatbot window.

A public link was never a private message

This is uncomfortably similar to earlier discoveries involving shared ChatGPT links and Meta AI's public feed. Interfaces say “share” when the underlying action is “publish a web page anyone can open.” One word separates those ideas, and almost nobody reads them the same way.

Anthropic can add noindex and search engines can remove results. Users have an easier rule: if a conversation contains something you would not post publicly, do not create a public link. Follow our coverage of AI models and agents and AI security and power. Checking your shared list takes less than a minute. Do it before another crawler does.