Privacy guide
Private Wedding Photo Sharing
Privacy is an access model, not a label. Match the protection to the event and tell guests exactly who can view their contributions.
By Chandra
Product documentation and wedding photo sharing guides
Short answer
Choose the least burdensome access model that still protects the event. A private-by-link gallery is practical for most invited weddings; add a PIN when a shared secret is useful; use named accounts when you must identify and revoke individuals; use upload-only access when guests should not see one another's files.
Five privacy models
| Model | Control | Guest effort |
|---|---|---|
| Unlisted private link | Keeps gallery out of public discovery | Very low; link can be forwarded |
| Link plus PIN | Adds a shared secret | Low; PIN can also be shared |
| Named accounts | Identity-based access and revocation | Higher; registration or sign-in |
| Upload-only inbox | Contributors cannot browse files | Low to medium |
| Direct encrypted transfer | Strong for selected recipients | High; poor fit for a large group |
Ask four permission questions
- Who can upload?
- Who can immediately view?
- Who can download originals?
- Who can change access or remove content?
A platform may give different answers to each. Do not infer download restrictions from the word “private.”
Treat links and QR codes as credentials
Share them inside the venue and through invited channels, not on public social profiles. Include a readable URL only on material intended for guests. If the platform allows link reset, know how to use it before an accidental public post occurs.
Account for people in the pictures
Tell guests if uploads will appear in a live feed. Review media before sharing beyond the original wedding group, particularly where children, private cultural ceremonies, or vulnerable attendees are involved. Offer a clear route to request removal.
Know the limit of revocation
Closing a gallery stops future access but cannot retrieve downloaded copies or screenshots. For especially sensitive media, restrict the initial audience and avoid enabling broad downloads. Privacy decisions are easiest before the link spreads.
Finish with data hygiene
Export the collection, verify backups, close uploads, remove collaborators who no longer need access, and delete the hosted event when it is no longer required. Record the provider's retention dates rather than assuming “private” also means “stored forever.”
Make the ask easy
Collect the photos guests actually took.
Give guests one QR code, let them upload from the browser, and keep the gallery under your control. Photos, videos, late uploads, and one download when you are ready.
Learn more about Folded as a wedding photo sharing app for guests.