If it's publicly visible (logged in or not), then it can be scraped.