Sharing Links & Permissions

When you make content public, it gets a unique shareable link. This guide explains how these links work and what permissions apply.

How shareable links work

Every public note and page gets a unique link. The link format is:

• Pages: https://app.paxalia.com/pages/public/<token>
• Notes: https://app.paxalia.com/notes/public/<token>

The <token> is a unique identifier that is generated automatically when you make the content public. This token is random and hard to guess, which makes your content reasonably private even though it's "public".

Who can view public content?

Anyone with the link can view public content. They do not need:

• A Paxalia account.
• To be logged in.
• To be a member of your workspace.

This means you can share content with anyone — clients, friends, colleagues, or the general public.

Link permissions

Public links are view‑only. Viewers can:

• Read — view the full content of the note or page.
• Share — copy and share the link with others.

Viewers cannot:

• Edit the content.
• Delete the content.
• See the workspace it belongs to.
• See the author's other content.

Managing your public content

You can manage your public content at any time:

• Make private — toggle "Make Public" off to remove public access. The link will stop working.
• Hide from community — Pro users can hide content from the Community Feed while keeping the link active.
• Delete — delete the note or page permanently. The link will stop working.

Security considerations

Public content is rendered using HyperViewer, which:

• Does not execute JavaScript.
• Sanitises all user‑generated HTML.
• Protects against XSS and other injection attacks.

This means public content is safe to view even if it contains untrusted HTML.

Learn more about HyperViewer & CSS Support.

Next steps

Now that you understand sharing links, explore Settings to customise your experience.