A system for securely delivering private content to client devices over a communications network, comprising: - a plurality of client devices connected to the communications network, each client device comprising a client processor, a screen, a code reader/decoder and a local memory and each client device is associated with a user; - a plurality of physical products, each physical product being uniquely associated with a client device and a user account, and each physical product comprises a unique smart code with a unique product ID encoded therein, the product ID being uniquely associated with the physical product; - a server connected to the communications network, the server comprises a server processor and a storage device to store a plurality of private content for a plurality of user accounts, each user account is associated with a user, the server receives access requests to access private content from the plurality of client devices over the communications network, each access request comprises a device ID of the client device from the local memory of the client device and the product ID scanned from a physical product of the user using the code reader/decoder of the client device; the server processor is configured to: - authenticate the received product ID and the received device ID in an access request by determining whether the received product ID is associated with the user account; - generate a unique Web address or uniform resource locator of a webpage for each user account from the product ID associated with said each user account, each webpage hosting the private content of said each user account and accessible with the product ID associated with said each user account; - retrieve the device ID associated with the received product ID from the storage device in response to determining that the received product ID is associated with the user account, and compares the received device ID to the retrieved device ID in response to determining that the received product ID is associated with the user account; characterized in that the server denies the access request received from a client device to access the requested private content in response to non-authentication by the server processorof either the received device ID or the received product ID in the access request; and in that the server accepts the access request and transmits the requested private content to the client device associated with the received device ID in the access request over the communications network in response to authentication by the server processor that the received device ID in the access request is associated with the received product ID in the access request, thereby providing multiple levels of authentication before delivering the requested content. - a plurality of client devices connected to the communications network, each client device comprising a client processor, a screen, a code reader/decoder and a local memory and each client device is associated with a user; - a plurality of physical products, each physical product being uniquely associated with a client device and a user account, and each physical product comprises a unique smart code with a unique product ID encoded therein, the product ID being uniquely associated with the physical product; - a server connected to the communications network, the server comprises a server processor and a storage device to store a plurality of private content for a plurality of user accounts, each user account is associated with a user, the server receives access requests to access private content from the plurality of client devices over the communications network, each access request comprises a device ID of the client device from the local memory of the client device and the product ID scanned from a physical product of the user using the code reader/decoder of the client device; the server processor is configured to: - authenticate the received product ID and the received device ID in an access request by determining whether the received product ID is associated with the user account; - generate a unique Web address or uniform resource locator of a webpage for each user account from the product ID associated with said each user account, each webpage hosting the private content of said each user account and accessible with the product ID associated with said each user account; - retrieve the device ID associated with the received product ID from the storage device in response to determining that the received product ID is associated with the user account, and compares the received device ID to the retrieved device ID in response to determining that the received product ID is associated with the user account; - authenticate the received product ID and the received device ID in an access request by determining whether the received product ID is associated with the user account; - generate a unique Web address or uniform resource locator of a webpage for each user account from the product ID associated with said each user account, each webpage hosting the private content of said each user account and accessible with the product ID associated with said each user account; - retrieve the device ID associated with the received product ID from the storage device in response to determining that the received product ID is associated with the user account, and compares the received device ID to the retrieved device ID in response to determining that the received product ID is associated with the user account;