diff --git a/wled00/network.cpp b/wled00/network.cpp
index eed19aaff3..715e4c695e 100644
--- a/wled00/network.cpp
+++ b/wled00/network.cpp
@@ -436,6 +436,10 @@ void installIPv6RABlocker() {
 }
 #endif
 
+// Runtime state private to this file - previously WLED_GLOBAL, a leftover from
+// when all state lived in one big extern block regardless of who used it.
+static byte apClients = 0;
+
 //handle Ethernet connection event
 void WiFiEvent(WiFiEvent_t event)
 {
diff --git a/wled00/wled.h b/wled00/wled.h
index 9bafb49196..cf4bfb057e 100644
--- a/wled00/wled.h
+++ b/wled00/wled.h
@@ -578,7 +578,7 @@ WLED_GLOBAL uint16_t userVar0 _INIT(0), userVar1 _INIT(0); //available for use i
 // internal global variable declarations
 // wifi
 WLED_GLOBAL bool apActive _INIT(false);
-WLED_GLOBAL byte apClients _INIT(0);
+// apClients is private to network.cpp - see there.
 WLED_GLOBAL bool forceReconnect _INIT(false);
 WLED_GLOBAL unsigned long lastReconnectAttempt _INIT(0);
 WLED_GLOBAL bool interfacesInited _INIT(false);