It’s a randomized link address. Near impossible for someone else to guess. So long as you give it just to them, they’ll be the only ones to redeem it