Wedding photography booking page from v0, are my client galleries public?

Unsure about: Security

Couples book a shoot and later get a private gallery link. v0 generated the upload flow and put everything in a Supabase Storage bucket called galleries, one folder per booking. The links are long random strings, which felt safe enough at the time. I would like someone to tell me whether that is actually private or just hard to guess.