It sounds like your problem is your confusion about trying to prevent devices from accessing your public data over the Internet. Have you tried adding an rss feed or another API instead?