Privacy and access

Who can see my album?

Anyone holding the link. There is no other access control, by design.

Possession of the link is the whole permission model, which is what makes it possible for a guest to upload without an account. Treat the link the way you would treat a key.

Event pages are excluded from search engines in four independent ways and no event URL appears in our sitemap, so an album cannot be found by searching for it. It can be reached by anyone the link reaches.

There is a separate album link you can send to people who should only look, without giving them the upload page.

Can I stop guests browsing the album?

Yes. Turn off Guests see photos and videos in Settings. They can still upload; they just cannot browse.

This is worth considering for corporate events, where the people uploading are not always the people who should see everything that was uploaded.