If you use an Iframe to embed one web page in another, all that you see is the code of the "parent". Unfortunately it is easy enough to work out from that how to call the child page directly! So it can be hidden from casual view, but not very effectively. Basically, if the web browser can read it, so can anyone.
Bookmarks