It's been a little while since I played with it, but I was wondering how the "private" soundcloud embeds worked. I was seeing musicians and music sites utilize

It's been a little while since I played with it, but I was wondering how the "private" soundcloud embeds worked. I was seeing musicians and music sites utilize them. The main difference with them is that you can't click on them to listen to the track on Soundcloud.com, you can only listen to them when they're embedded elsewhere. Turns out, if you view the source on one of those embeds the full URL is right there. It's even called "permalink_url" and has the secret_token for the track as well, which is what lets you listen to private tracks directly on Soundcloud.com. The url structure is: https://soundcloud.com/[user]/[track]/[secret_token] https://soundcloud.com/[user]/[track]/[secret_token] If I recall correctly, the API also lets you look up some info on private tracks with that secret_token. Not sure if all of this was intentional, but I reported it back in 2016 via their "whitehat" channel and didn't receive any type of response back.