spag

@doc4:

An unlisted post would be visible to another user who receives the exact URL.

A private post is only visible after logging in, only for those who have an appropriate account, basically the author.