Privacy & moderation

The Privacy & moderation tab is the central place where you decide two things: who may see and upload to your event and what actually ends up in the gallery. From here you control access protection, photo pre-approval, the AI content filter, guest permissions and — as the owner — the permanent deletion of the event.

Phone

Computer

Settings → Privacy & moderation: access protection, approval, AI filter, permissions and the danger zone in one place.

Tip

There is no classic “access code” field. Access is controlled by the Gallery protection block (Password protected / Completely private / Open access) together with the default invitation code. We explain both below.

Reaching the area

1. Open your event’s admin area — via the profile menu in the top right (Management → Admin portal) or directly through the admin route. How to get into the admin area is covered in Access your event.

2. In the left sidebar, choose Settings.

3. In the tab bar at the top, click Privacy & moderation.

Note

Save behaviour (applies to ALL options on this tab): changes are not saved immediately. Each selection marks the tab with a red dot ●. Only the Save changes button at the bottom persists everything. If you leave the tab with unsaved changes, a warning appears. The header toggle Show all advanced options expands every collapsed advanced section (including “Guest experience”) at once; the search bar jumps straight to the matching setting.

Gallery protection — who gets in

The heart of the tab. Under Gallery protection you decide how guests access your gallery. There are three mutually exclusive options.

Password protected

Guests need a code to enter. When you choose this option, a section with the default invitation code unfolds.

1. Select the Password protected tile.

2. Enter a code in the Default invitation code field (placeholder e.g. wedding-2024). The Random button generates a readable code such as golden-gala-482. This code is used for simple invitation links and QR codes — it is your event’s “access code”.

3. Optional: enable Include default invitation code in QR code so a scan of the QR code lets the guest in directly (one-scan access, without typing the code).

Completely private (Advanced)

Maximum privacy: only custom invitations work, and the default code is disabled. An info box Maximum privacy mode unfolds, along with the button Manage advanced invitations, which takes you to the invitation manager in advanced mode (roles/individual codes).

Caution

In this mode the default QR code no longer works — that is intentional. You must create individual invitations per guest or group. More on that in Roles & permissions.

Open access

Anyone with the link can view the gallery. When you choose this option, the Default guest permissions card appears with two role tiles that define what newly arriving guests may do:

• Viewer — can view and like photos, but not upload.
• Contributor — can upload photos and complete tasks.

For Viewer, an additional “Viewer-only access” block appears with a Manage invitations button, which lets you grant specific people more rights when needed.

Tip

Which access should I choose?

Situation	Recommendation
Private wedding / family celebration	Password protected + an easy-to-share default code
Public festival, everyone should join in	Open access + Contributor role
View-only event (guests should not upload)	Open access + Viewer role
Sensitive corporate event, tightly controlled	Completely private + custom invitations

Details on codes, links and QR are under Invite guests; roles are under Roles & permissions. The guest-side entry point is described in Join an event.

User permissions — allow uploads globally

The User permissions block is always available (not premium) and answers the question: What can non-administrators do?

• View-only gallery — guests can view but cannot add photos; only administrators upload. When selected, a yellow warning appears: even with valid invitation codes, non-admins cannot upload. The warning’s tip: if guests should contribute, choose “Open sharing” instead.
• Open sharing — guests can add photos to the gallery (mobile-friendly). This is the default choice for participatory events.

Note

This setting acts globally (upload yes/no for all non-admins). The Viewer/Contributor roles from gallery protection are the finer, per-guest counterpart. Together they determine whether a given guest may upload.

Photo approval system (pre-moderation)

Caution

This is a premium feature (content moderation). Without the right plan, the block is covered by a premium overlay and the choice is locked. See Upgrade & plans.

Under Photo approval system you answer: Should photos be approved before they are shown publicly?

• Yes, review first — best for corporate galleries and professional settings. New uploads land as Pending review in the moderation queue and become visible only after you approve them.
• No, show immediately — ideal for weddings, family galleries and casual gatherings. Photos appear right away.

How to work through the queue is covered in Moderation.

AI content filter (NSFW)

Caution

This too is a premium feature (AI NSFW filter). Without the entitlement the switch is locked. See Upgrade & plans.

The Content safety filter card carries an “AI” badge and a switch. When enabled, the AI automatically filters inappropriate content.

1. Turn on the Content safety filter.

2. An info box Auto-moderation active appears. Its text depends on the photo approval system:

   • Pre-moderation on: NSFW uploads are automatically not published, while other uploads wait for manual review.
   • Pre-moderation off: NSFW uploads are automatically not published, while safe uploads are published immediately.

3. Optional: enable Also scan existing media / Re-evaluate existing media to run already-uploaded photos through the filter after the fact. If a scan is already running you see Scan in progress with a countdown — just wait for it to finish.

Note

Fine-tuning only in developer mode: a protection level (Relaxed / Moderate / Strict / Very strict, default “Moderate”) and the option Automatically reject questionable content are only visible when developer mode is active. In normal operation the default “Moderate” is sufficient.

You can see the AI’s results and statistics under AI processing.

Guest experience (advanced section)

The Guest experience section is collapsed by default. Expand it (or use “Show all advanced options” at the top).

• Quick gallery access — guests enter the gallery immediately; a random nickname is assigned automatically. For a password-protected or private event the password is still required — only the manual nickname choice is skipped.
• Show event branding on the login page — displays your logo, cover and title on the password/login page. Disabled, guests see a generic page.

Dangerous actions — delete the gallery (owner only)

Danger

The Dangerous actions section is visible only to the owner. A gallery deleted here is gone permanently — photos, videos, comments, settings and invitation codes are removed irreversibly. Individual deleted photos can be restored via the Recycle bin, but a deleted event canNOT.

1. Expand the red Dangerous actions section.

2. Note the permanent-deletion warning. Download a backup first — the reminder contains the (Download Archive) link, see Download & export.

3. In the confirmation field, type exactly the word DELETE. Only then does the Delete entire album button become active.

4. In the final dialog Final confirmation you again see a list of what will be deleted (photos/videos, comments, settings, invitation codes). Confirm with Yes, delete forever.

Phone

Computer

The danger zone: visible to the owner only, with a backup reminder, the “DELETE” type-to-confirm field and the final delete button.

Approval workflow

As soon as pre-moderation is active or the AI filter holds content back, new media land in the moderation queue.

1. Open Moderation in the left sidebar. How you reach the management/moderation area in general is shown by the profile menu in the top right.

   Phone

   

   Computer

   

   Via the profile menu in the top right you reach Management → Moderation and the admin portal.

2. Use the three tabs with live counters: Pending review, Unpublished and Published.

3. Click an item and publish or reject it.

The full queue guide is under Moderation. You ban individual guests as described in Ban users.

Edge cases & troubleshooting

• “I can’t see the photo approval system or the AI filter, or it’s locked.” Both are premium features — check your plan under Upgrade & plans.
• “A guest can’t upload despite having a code.” User permissions are set to “View-only gallery” or the role is “Viewer”. Heed the yellow warning; switch to “Open sharing” or “Contributor”.
• “My changes are gone after switching tabs or reloading.” They weren’t saved — watch for the red dot on the tab and click “Save changes”.
• “New photos don’t appear in the gallery.” Pre-moderation is active; approve them in Moderation under “Pending review”.
• “I chose Completely private and the default QR no longer works.” That’s intended — only custom invitations from the advanced invitation manager work.
• “The AI re-scan says ‘already running’.” Wait for the displayed countdown; then you can scan again.

Best-practice tips

• Choose access deliberately: Password protected for private celebrations, Open access + Viewer for view-only events, Completely private for sensitive corporate events.
• Set an easy-to-share default invitation code (the “Random” button gives readable codes) and enable “Include code in QR code” for one-scan access.
• For corporate and children’s events: pre-moderation “Yes, review first” plus the AI filter on.
• Before every deletion, download an archive — a deleted event cannot be restored.

Note

Related guest help: Privacy and Report content.