Claude chats exposed in Google, Bing search results

Over the weekend, users discovered that some Anthropic Claude chats could be easily found via Google and Bing search results, flagged initially by a redditor. The issue surfaced conversations in which people asked for advice about political affiliation, whether attorneys in Kansas are required to self-report when they believe they have committed ethical violations, and erotic role play. Claude allows users to share chats by creating public URLs—called "snapshots"—that other people can view.

AnthropAIC instructed web crawlers used by search engines not to index these shared chats via a robots.txt file, a standard mechanism for telling web scrapers which parts of a site are appropriate to access. According to a snapshot on the Wayback Machine, Anthropic's robots.txt has made shared chats off limits to web scrapers since at least September 2025. However, preventing pages from being indexed in search engine results is more difficult than robots.txt alone suggests. Bing's technical documentation states that developers can block the search engine's web crawlers using robots.txt, but also advises that developers should include a "noindex" tag on individual pages as well. Google's guidance goes further: the company says it ignores robots.txt instructions if a page is linked to from elsewhere on the internet and the page owner does not also include a "noindex" HTML tag on the page or an "x-robots-tag" in the page's response header. WIRED reviewed a sample of the exposed Claude chat pages and found that they did not include the "noindex" tag.

At the time of WIRED's investigation, some of the exposed chats had been deleted, and Google no longer returned results for the relevant search queries. However, Bing still showed "about 612 results" when searching for "site:claude.ai/share." Microsoft, which owns Bing, did not provide comment. Google spokesperson Ned Adriance told WIRED that the indexing of shared Claude chats is Anthropic's responsibility, stating: "Neither Google nor any other search engine controls what pages are made public on the web, and these pages were indexed across many search engines. We give site owners clear controls to decide whether pages can be crawled or indexed, and we always respect those directives." Anthropic did not respond to multiple requests for comment or to questions about why it did not include the "noindex" tag on shared chat pages.

This was not the first time Anthropic faced this problem. Last September, the company encountered the same issue and told Forbes that it uses robots.txt to signal to crawlers not to access shared chats. Forbes pointed out at that time that robots.txt offers no guarantee of preventing search engines from indexing specific web pages. Though shared chats are no longer turning up in Google results, the pages WIRED reviewed still do not have a "noindex" tag, meaning they could potentially show up in search engines again. Claude users can manage access to their shared chats through Settings > Privacy > Shared chats.

The exposure of Claude chats in search results reveals a fundamental mismatch between how Anthropic believed it was protecting user privacy and how search engines actually work. Anthropic has relied on robots.txt files to block indexing since at least September 2025, but this incident—which Anthropic faced a similar complaint about last September—shows that robots.txt alone is insufficient. Both Google and Bing explicitly state in their technical documentation that developers must use an additional "noindex" HTML tag or header directive for reliable blocking, yet Anthropic did not implement these measures on its shared chat pages.

The incident also highlights a broader tension in how AI labs use robots.txt. While Anthropic, Meta, and OpenAI all use robots.txt to block their competitors' AI training crawlers from accessing their chatbot sites, the same mechanism proved unreliable for protecting user privacy. Google spokesperson Ned Adriance attributed responsibility to Anthropic, stating that search engines "give site owners clear controls" and "always respect those directives." This framing sidesteps the reality that robots.txt does not always prevent indexing, a point Google's own documentation acknowledges—the company ignores robots.txt if a page is linked elsewhere and lacks a "noindex" tag. The result is that users sharing supposedly private conversations inadvertently made them discoverable to anyone running the right search query.

No comments yet. Be the first to share your thoughts!