Somewhere in a message thread, a chat history, or a copied-and-pasted Slack message, there’s a link you created in about two seconds — a shared link to an AI chat. It took one click. You probably don’t remember doing it. The link doesn’t remember you. It’s still out there, and anyone who has it can open it.
The share button on AI chatbots feels like forwarding an email. It behaves more like publishing a web page. Once you understand the difference, you’ll think twice before clicking it — and you’ll want to check the ones you already sent.
What the share button actually creates
In ChatGPT, tapping Share generates a unique URL, something like chatgpt.com/share/ followed by a long ID. According to OpenAI’s own help centre, anyone who has that link can open the shared conversation — no account needed, no request, no notification to you.
On a personal account, the link captures a snapshot: the conversation as it was when you hit share. Messages you add afterwards aren’t included unless you choose “Update link.” (In workplace or school workspaces, the rules differ — shared links there stay restricted to the workspace and can include later messages, so check the sharing notice before you keep typing.)
Shared links are anonymous by default, meaning the page doesn’t show your name. But that’s the only privacy you get. The conversation itself — everything you typed, everything the chatbot said — travels with the link.
The week AI chats showed up in Google search
This isn’t a hypothetical warning. In late July 2025, researchers discovered that thousands of shared ChatGPT conversations were appearing in Google search results. Typing site:chatgpt.com/share into Google pulled up more than 4,500 shared chats — including some containing names, CV details, mental-health discussions, and business plans. Search Engine Land reported the story after Fast Company’s investigation first surfaced the scale of it.
The cause was a small opt-in checkbox: “Make this chat discoverable.” If you’d ticked it when sharing, search engines were free to index your conversation like any other web page. Plenty of people had ticked it without realising what it meant.
On 31 July 2025, OpenAI’s chief information security officer, Dane Stuckey, announced the feature’s removal, calling it “a short-lived experiment” that “introduced too many opportunities for folks to accidentally share things they didn’t intend to.” OpenAI worked with search engines to de-index the pages that had slipped through. Cached copies lingered for a while afterwards, as cached pages always do.
The discoverability checkbox is gone now. But the deeper lesson is intact: a shared chat link was always a public URL with a slightly unguessable address. Security by obscurity is not privacy.
More goes with the link than you’d expect
When you review what a shared conversation carries, OpenAI’s documentation spells out a list worth knowing:
- Uploaded files and images can appear in the shared conversation. That screenshot, that document — if it was in the chat, it’s in the link.
- Anything you typed is visible, including names, addresses, and details you mentioned casually in passing.
- Some older sharing experiences displayed the creator’s name. So the “anonymous” label wasn’t always watertight.
- Disabling chat history or training doesn’t delete your shared links. OpenAI’s FAQ is explicit: turning off history just hides conversations; it doesn’t touch the links. The share button gets disabled for future chats, but the old links survive.
- Deleting the original chat doesn’t kill the link either. You’ll need to delete the shared link separately.
OpenAI’s own advice is blunt: don’t include health information, financial details, passwords, account numbers, or other sensitive personal information in shared content. That’s sensible — and it would be even more sensible to read what happens to everything you paste into a chatbot before the sharing question even comes up.
A four-minute audit of your shared links
If you’ve ever shared an AI chat, the links live in one dashboard. Here’s how to find them in ChatGPT:
- Open ChatGPT and click your name (bottom left), then Settings.
- Go to Data controls, then Shared links, and click Manage.
- You’ll see every shared conversation and shared scheduled-task link. Go through them one by one.
- For each link, ask: does someone still need this? If not, delete it — you can remove individual links or delete them all.
- If you still need a link, consider deleting it and creating a fresh one. The new URL won’t have been indexed anywhere.
It’s the same Data controls area where you manage training-data opt-outs, so it’s worth visiting for both reasons at once. (Shared scheduled tasks appear in the same list, in case you’ve ever shared one of those.)
For extra peace of mind, you can search Google for site:chatgpt.com/share plus a distinctive phrase or your own name, to see whether anything of yours surfaced publicly. New links shouldn’t be discoverable anymore, but older ones made it through the de-indexing net at different speeds.
Before you share your next chat
None of this means you should never share an AI conversation. Sharing is genuinely useful — sending a clever itinerary, a coding solution, or a recipe your chatbot helped with. The fix is a mental reframe: treat every share as publishing, not forwarding.
A few habits make that reframe practical:
- Skim the whole chat before you share. Scroll up and read it as a stranger would. The personal detail is usually three screens above where you think the conversation ends.
- Redact before, not after. Edit out names, numbers, and identifying details in the chat itself — a shared snapshot can’t be redacted once it’s made.
- Assume the link will travel. Anyone who receives it can forward it. If the contents would embarrass you as a screenshot on a stranger’s phone, don’t make the link.
- Share less, not more. Sometimes a screenshot of one answer is all you need — no live link, nothing to clean up later.
The share button isn’t dangerous. It’s just more public than it feels, and it stays public longer than you’d guess. A four-minute audit today, plus a moment’s thought before the next share, closes that gap for good.
