# Visibility model

> Public, unlisted and private, who can read each one, and where organisation policy overrides your choice.

Visibility sets who may read a blueprint once it is published.

![blueprint:josh/visibility-model](https://blueprintr.io/embed/josh/visibility-model#h=520)

| Value | Who can read it | Search engines |
| --- | --- | --- |
| **Public** | Anyone | Indexed |
| **Unlisted** | Anyone with the link | Not indexed |
| **Private** | You, and anyone it is shared with | No |

## Unlisted links

An unlisted URL is unguessable, not protected. It survives being forwarded,
pasted into a ticket, or sitting in someone's browser history after they leave.

> [!IMPORTANT]
> Use private for anything that would matter if it leaked.

## Status comes first

An unpublished draft is invisible regardless of its visibility setting.
Visibility only takes effect once you publish.

## Organisation policy can override you

An organisation can apply a **classification** that caps how public its content
may be. Where a classification is set, you cannot publish above the ceiling it
defines, and the Publish step says so. See
[policies](/foliums/blueprintr-user-guide/teams/policies).

## Each surface gates independently

A blueprint's visibility does not automatically govern every route that can
reach its content. Files, embeds, discussion and analytics each apply their own
check. A mistake in one place cannot open all of them.