Only visible with generated link or local storage save on the device.

You will need a password or anyone with a link can access it.