Promise you'll all stay with me to the end of this post. It's a bit *technical*
So having done web work for a major retail brand - I have experience in loading assets to a large website. Usually - if it's a big project - you load to a testing server to make sure everything looks good before you ACTUALLY publish it online. Or - in this case of ANTIdiaRy - to test content that you plan on publically releasing later.
Sometimes these servers are remote - meaning they're not connected to the internet. However, if it's a large project and many people are working on it - these testing servers are online but usually hidden and password protected, etc. etc.
Well, for the company I work for, our testing server is called "staging", and when we want to see the testing server - you simply add "Stage" to the front of the address/url. There could be many different things this could be named, but when I added "stage" to the url for room #3 (
https://stage.antidiary.com/#/room/3 ) - I got a request for a username and password.
This isn't actually any concrete info - but it's clearly functioning, so if someone were smart enough to guess the username/password, you might actually be able to see the testing server/all of the content they plan on loading to the site. That is assuming they don't also delete out all content from the testing server once they're done with it.