Invite-only. Enter the email your invitation was sent to — a sign-in link comes back. No passwords.
You see only your own room. That isolation is enforced by the database itself, not by promises.