Codex output can be shared, but you control the privacy by where it lands. Publish it public (--no-lock) or private (password) on your own domain instead of a vendor's.
Public or private, your call
Hushdrop site.html # public, branded drop site.html -p secret # private, password-gated
FAQ
Is it really open-source and self-hosted?
Yes — MIT licensed, and it runs on your own Vercel Blob + domain. No third party ever holds your content (it's encrypted client-side) or controls your URL.