Seems you're building an authentication mechanism which is based on private links. You should keep in mind that with services like similarweb.com, which steal users click-stream using a number of extensions that sell them this data, the concept of private links no longer esxists. Open a link in your browser, an extension sends it to similarweb.com, and the "private" url will be displayed on their dashboard, to their premium users.