Share links & visibility
Updated
Every task is either internal or shared. Only shared tasks — and only approved fields — are published to the board projection the other side sees.
Share modes
| Public board | Stable URL /b/{workspace}/{board}. Read-only Kanban for anonymous visitors. |
|---|---|
| Private link | Unguessable /s/{relationship}/{token}. Never indexed, rotate or revoke any time, optional expiry. |
| Require sign-in | Viewers authenticate first. Unlocks identity, comments and presence avatars. |
Search indexing
Publishing is the privacy boundary; search visibility is only a distribution setting. When you publish, search visibility is on by default. Turning it off keeps the board public but adds noindex,nofollow and removes it from the sitemap. The URL is deliberately not blocked in robots.txt, so search engines can recrawl it and see the noindex. Removal from search results and third-party caches is not instant.
Unpublishing is the security action: the board becomes private, cached copies are purged and the public URL returns 404 (never a sign-in page). Members keep full access in the workspace. Every publish, unpublish and search-visibility change is recorded in the workspace audit log.
Visibility model
// every task, regardless of source
task.visibility = 'internal' | 'shared'
task.owner_side = 'host' | 'partner' | 'shared'Revoke or rotate
Rotating issues a new token and retires the old URL. Only a SHA-256 hash of the token is stored, so a leaked database row can’t reconstruct a link. Private links use generic link-preview text, so pasting them into chat doesn’t leak board content.
Next: Viewer presence →