There's a setting to show servers on the public community list, and I think it might default to true. Serious design problem if so. Add -public 0 to the server launch command. Keep regular backups.