Every url you post on facebook chat can be found…so be careful!
This article on Medium deeply explain this behavior.
I am not a fan of how Facebook security is implemented: some time ago I discovered every developer could access to production, at least until 2011