Loading
Private means private. Content is checked before it is served, isolated while it runs, and encrypted along the way.
On a private site, a viewer confirms their email and passes your access rules before any content appears. Your files are kept in private storage and are never exposed at a public, guessable link. The page is streamed only after a viewer is verified, so there are no leaky links.
Once a viewer is verified, Thryvate creates a short-lived, single-viewer link to stream the page. It expires quickly and cannot be reused by someone else.
Every site runs inside an isolated, sandboxed frame, so a page cannot reach into other sites or quietly contact other services. If a page genuinely needs an outside source, you allow it explicitly (see What you can publish).
Traffic is served over HTTPS, and certificates for custom domains are handled for you. Your stored files are encrypted at rest.
Every request, verification, view, and denial is recorded, so you always have a clear record of who reached a site and when. See Sharing and access control for the controls behind it.
You can delete a site and its entire history from the dashboard whenever you want, which turns off the link and removes its content.