The private folder is a holding place you can place password files etc that can be accessed by an absolute link in a script but not by the web. It's most commonly used to put text password files used by scripts in the cgi-bin. It's use depends on the scripts/applications you are running.