Can projects be stolen?

Is there a risk that someone could access or steal my project by using the test link of the game?

If they guess the project slug and the secret link, technically yes. But that would take an unreasonable amount of time and there isn't much motivation for hackers to try to access a secret project. Depending on how microStudio is hosted and whether it has DDoS protection, the server could be overloaded, making the guessing process even slower. If someone were to try to hack microStudio (which isn't likely to give them any useful information), it would probably be based on the fact that the access token is stored in localStorage.

By the nature of web application, when you share a link of your project, you're actually giving access to full code to web clients. That's the way web browsers can interpret it and rendering something on your screen. In microStudio part of this projects is also the code you write in microScript or any other of the languages supported and later converted/transpilled to javaScript.

You can check it by using inspections tools of the browser, it may not be well organised for humans but the code is all there.

Sorry for taking so long to respond, but thanks for the information anyway