Since it is coming up again:
Mastodon isn't private.
Expect anything you toot to be visible to everyone, regardless of your settings for visibility.
Mastodon is built on a system that isn't appropriate for private conversation and the work arounds for private toots and the like are not in any way robust against someone just ignoring them.