It's generated when the URL is polled and served to user directly. We don't save it since it is usually served just once and it contains the secret.