AI chat share links: who can open them, and what deleting leaves, in 10 apps

The Morse teamPublished October 28, 202611 min read

AI chat share links are public in most apps: as of October 28, 2026, anyone who has a share link from a personal ChatGPT account, Gemini, Grok, Meta AI, Perplexity, or Mistral's Vibe can open the chat, and none of those six lets you pick who. Claude now shares by email invite unless you choose a public link, Microsoft's sharing page says Copilot viewers must sign in, and Duck.ai's links expire after 48 hours by default. Only Claude, OpenAI, Grok, Duck.ai, and DeepSeek say anything on their own pages about search engines, and they say different things.

We read each company's own help pages, privacy policies, and robots.txt files on October 28, 2026, and built the two tables below from them. For OpenAI and Perplexity we read the Internet Archive's most recent copies of their help centers: OpenAI's from October 14, 2026, and Perplexity's from October 17 and April 27, 2026. Where a company's pages don't answer a question, the table says "not stated" rather than guess. Poe is left out: we couldn't read its help center FAQ, which covers group-chat links and "Share on Poe" posts, and its Privacy Center says only that other users can't read your chats "unless you explicitly decide to share them" (Poe).

Are AI chat share links public?

Mostly, yes. A share link is a web page: the company stores a copy of the chat and serves it to whoever has the address.

Most let the person you send a link to carry on the chat as a copy in their own account: ChatGPT, Gemini, Perplexity, Copilot, and Duck.ai each say so. Gemini makes exceptions for chats made with Gems and for users under 18. Claude's links are view only, and recipients "can't reply, copy it into their own account, or continue the conversation."

Are ChatGPT shared links public?

Yes, from a personal account, and the rest of OpenAI's share-link rules are in is ChatGPT private. Links from a Business, Enterprise, or Edu workspace open only for that workspace's members and, unlike personal links, "can include messages added after sharing" (OpenAI).

Are Claude shared chats public?

Not by default anymore. Anthropic's page on sharing with specific people, dated September 4, 2026, calls an email invite "the default way to share a chat" (Anthropic). An invite opens only for the address you typed, and a forwarded invite "won't open for anyone else."

A public link is still an option on Free, Pro, and Max, and Anthropic's own rule for it is "treat a public link as public" (Anthropic). On Team and Enterprise plans, public links aren't available at all. Guides written during Claude's July 2026 search episode describe its Share button as public-only; Anthropic's September 4 pages changed that.

Do shared AI chats show up on Google?

They can, and the company's own setup decides how easily. Google's documentation says a page blocked by robots.txt can still appear in results "if other pages link to it," because the crawler "will never see the noindex rule" (Google). So the safer setup lets crawlers fetch a share page and tells them on the page not to index it.

Claude's robots.txt changed in July 2026. The Internet Archive's copy of claude.ai's robots.txt from July 10, 2026 blocked crawlers from every /share/ page (archived). By its July 30 copy, that line was gone (archived). Anthropic now says each shared page carries noindex, that it publishes no "directory or sitemap of shared chats," and that each link is "a long random string that can't be guessed." It also lists what it can't control: where the link gets posted, copies saved by archive and scraping services, and crawlers that ignore noindex.

Grok is the only one of the ten whose FAQ says its links may be indexed (see the first table). Its robots.txt, read on October 28, 2026, tells crawlers in general to stay out of grok.com/share-links, the page that lists your links, and doesn't block the shared chats themselves (robots.txt). What Grok's links have exposed before is in is Grok private.

Search engines aren't the only way in. Reported: the security firm Claroc says it found more than 6,800 Meta Muse share addresses, each built from the chat's title, in passive-DNS records, which log the hostnames people's browsers look up. Claroc says Muse's robots.txt asked crawlers to stay off the share paths, but Claroc's search "never went near a search engine" (Claroc).

When did shared AI chats end up public?

In five apps since April 2025: Meta AI, ChatGPT, Grok, Claude, and Meta's Muse agent. The table keeps what a company's own pages confirm apart from what the press or researchers reported.

Can anyone see a link you only sent to one person?

Anyone it reaches. Anthropic answers this exact question for public links: whoever has the link "can forward or post it, and there's no way to limit a public link to specific people" (Anthropic). OpenAI says the same in fewer words: "Anyone who can access a link can also forward it."

Three designs narrow who that is. Claude's invites work only for the invited address. Copilot asks every viewer to sign in, with a work account limiting it to your organization. Duck.ai encrypts the chat on your device and puts the key in the link's fragment, after the #. DuckDuckGo says browsers "typically leave the fragment out of any requests they send to servers," so it "cannot decrypt or access the contents of your shared chat" (DuckDuckGo). Duck.ai still can't stop a reader from copying what they see, and its announcement says so: "no technical measure can stop that person from saving it outside of Duck.ai." How Duck.ai compares with other private assistants is in Duck.ai vs Lumo vs Brave Leo.

Does deleting a chat delete its share link?

In four apps the company says yes, though Anthropic says it only on its invite page, and in Gemini its two pages disagree.

ChatGPT has one exception. OpenAI says deleting a conversation removes its share link, but if the conversation has a scheduled task, "the task pauses, but its shared task link remains available. Delete the task link separately to stop access."

Deleting a link never reaches copies. OpenAI says it "does not remove a conversation or task another person already saved," Google says it doesn't delete posts where you pasted the link or chats others continued, and Anthropic says turning off a link "can't remove copies, screenshots, or archives someone else already made." For the full cleanup in one app, see how to delete Grok history, how to delete Claude chats, how to delete Gemini history, or how to delete ChatGPT history permanently.

How Morse keeps your chat history off its servers

A share link is a copy of your chat on the company's servers, at an address anyone can type. In nine of these ten apps, that copy comes from chat history the company already stores; Duck.ai, which keeps history on your device, uploads an encrypted copy only when you press Share. Either way, the company decides who can open the copy, whether a crawler may read it, and whether it dies with the chat, and you learn those rules from its help pages.

On Morse, your chat history is stored only in your browser, encrypted, and it locks when you sign out. Our servers don't keep messages or log their content, so the history you scroll through sits on your device, not on our servers. Morse doesn't train AI on what you write, sell your data, or show ads. To show a friend one answer, paste the words into a message of your own, where you choose every reader.

Pick each chat's mode by who should be able to read it:

• E2EE, for the chats you'd never want turning up at a public address. Before a message leaves your device, your browser verifies the enclave's proof that it's genuine, then encrypts the message for that enclave alone. Our servers pass along ciphertext they can't read, and only your browser decrypts the reply. This rests on the enclave hardware and attestation working as designed. E2EE is part of Pro, runs open-weight models, and leaves out web search and image generation.
• Private, the default, for everyday chats you'd rather no host held a copy of. DeepSeek, Kimi, GLM, and xAI's Grok answer with your account, email, and IP address removed, and Morse has zero data retention agreements with its inference, search, and other providers, so they have agreed to keep nothing.
• Anonymous, for asking GPT, Claude, or Gemini with no account of yours attached. Our proxy sends each message under Morse's own account, so the provider reads it without knowing it's you, and it may keep it for a limited time to check for abuse, under its own policy. Keep names and identifying details out of the message.

Because the history lives in one browser, clearing that browser, losing the device, or deleting your account erases it, and we can't bring it back. Paste anything you'll need later into your own documents. The account keeps your sign-in details, plan, and balance, and its usage ledger records no message text (privacy policy).

Before you press Share in any AI app

• Check your list now. Open the links page from the second table in every app you've used, and delete what you no longer need.
• Send text instead of a link. A pasted answer goes only where you send it, and there's no page left to delete later.
• Read the preview. ChatGPT, Gemini, and Perplexity can include uploaded files or images, and a task title can show in a link preview.
• Delete the link before the chat. Outside ChatGPT, Claude, Meta AI, and Copilot, the pages we read don't promise that deleting a chat kills its link.

Try a chat from the Morse home page before you sign up, or create a free account with no card. E2EE chats are part of Pro, $19 a month.