Putting something on the internet is unfortunately default public (insecure / opt-out) unless you can personally verify that it’s not, which might be impossible.