private is new and not announced. When private is true the granted player file is gated: no read surface returns a URL for it (listings, the file detail endpoints, the revision endpoints, or the reward email) and the client must call the download-link endpoint to obtain a short-lived (60 second) link. When it is absent or false, nothing changes: the grant hands out a one-hour signed URL exactly as before.private on an existing reward affects future grants only.curl --location 'https://api.lootlocker.io/admin/game//reward' \
--header 'Content-Type: application/json' \
--data '{
"entity_kind": "file",
"metadata": [
{
"key": "file_key",
"value": "102559/private/rewards/bonus-pack.zip"
},
{
"key": "file_name",
"value": "bonus-pack.zip"
},
{
"key": "private",
"value": "true"
}
]
}'{
"id": "string"
}