Artifacts are private by default. You can update sharing permissions from here at any time.