Setting the External Org-Wide Sharing Defaults

To prevent your Experience Cloud site's users from viewing records that you do not want them to access, edit your org-wide sharing settings to restrict external access to the relevant objects. We recommend setting the Default External Access to "Private" for these objects.

For more information about how to set external org-wide sharing settings, see Set Your External Organization-Wide Sharing Defaults in the Salesforce Help.