I would like to start a private sale of my tokens but for safety purpose without a website.
That may be safe for you but will be too risky for the investors or people who buy your tokens. I never saw developers or a team member stated they won't make an official site because of security reasons. So, it is strange for me you are saying "for safety purpose, no site". Commonly, I won't be interested in a project which has no site. For me, it is only a scam way if someone plans to sell tokens without an official site or trying to hide an important part of a project.