Project isolation
How private projects stay private.
On this page
Isolation at every layer
Your private project is available only to its signed-in owner. Both the API and database enforce this boundary, and private files are not publicly readable. A runner token can access work only in its own project. The public sample is one explicitly selected fictional example, not a way to browse other projects.
Not found, not forbidden
If another account opens your private link, TasteCase says it could not find it. This avoids revealing whether the project or record exists.