Attributes that begin with __ are mangled during runtime so direct access is thwarted. Module-level privacy is provided by using a single underscore _ prefixing an attribute name. This prevents a module attribute from being imported with "from mymodule import *". It will work with functions too.