Do not put your private key directly into badges.page, there are extensions that you can install to help you not share your private key directly. See The alby extension