Well, for starters, .htaccess does not exist on Replit. Creating that file will do nothing. There is a feature request that you can vote on if you want .htaccess to be a part of Replit.
If I understand correctly
you don’t want anyone to access your website? I don’t think private repls will help here. Try using Repl Authentication and making it so only users with access can use the website. This may help you: Replit auth in nodejs? - #13 by doxr Note that it is for Node.js projects.
There is also another way to make it so people can’t access your assets (not the actual webpage) using the browser.