Step 1 of 7
Define what private means for this video
Privacy is not a single switch. A link can be unlisted but still work for anyone who receives it. An account-restricted link may control viewers more tightly but create sign-in friction. A downloaded file can be watched offline, yet the sender cannot revoke it after it is copied. Decide what risk you are actually trying to reduce before choosing a service.
Step 2 of 7
Choose between a restricted link and a file transfer
| Sharing method | Best for | Main tradeoff |
|---|---|---|
| Account-restricted viewing link | A defined group that can sign in | Stronger viewer control but more setup for relatives |
| Password-protected or expiring link | A temporary event or reunion share | Passwords can be forwarded and expiry dates need communication |
| Unlisted viewing link | Low-friction family viewing | Anyone with the link may be able to open it |
| Cloud download link | Relatives who want their own full-quality copy | Downloaded copies cannot be recalled |
| Encrypted drive or in-person transfer | Highly sensitive archives or relatives with slow internet | Requires device handling and a separate password-sharing plan |
Avoid treating a platform label as a complete privacy guarantee. Read the current access settings, test them in a signed-out browser, and confirm whether search, embedding, resharing, download, comments, and expiration behave the way you expect.
Step 3 of 7
Separate the AlbumMap export from family delivery
AlbumMap’s export and permission FAQ distinguishes Free export permission from the link used to deliver a file. Free export terms allow AlbumMap to feature the finished video on its Examples page; export does not automatically publish it. Paid exports do not require that permission. A restricted family link does not cancel an export permission already accepted.
Download the finished export before the dashboard’s displayed expiry, then use the family’s chosen delivery method. A contribution invitation collects files; it is not the finished video’s viewing address. The interactive-map viewer is another separate output.
| Recipient rehearsal | Pass condition |
|---|---|
| Allowed viewer | The intended person opens the exact file, hears speech and can read captions. |
| Uninvited visitor | A separate browser is denied when account-restricted access is the requirement. |
| Download and closure | Check the permitted download, then remove access and retest the old link. Do not claim this recalls a saved file. |
In a 26 October 2026 test, a synthetic slideshow export reached Current and exposed Download video in the owner’s signed-in session. Opening that exact download link in a separate signed-out browser returned “Sign in to download this video.” The owner’s download link was therefore not an anonymous family-viewing link in this trial. Do not send it as if it were one, and do not share the organizer’s account credentials.
The trial used an administrator account displaying Premium. It did not establish whether another signed-in account could access the link. A saved owner download, recipient playback and revocation were not verified; the completed render alone did not complete delivery. Record the service, date, access setting and observed results when you test your own chosen delivery method.
Step 4 of 7
Prepare a viewing copy and an archive copy
One file does not have to serve every purpose. Keep a high-quality master as the family archive, then export a practical viewing copy for phones, televisions, and typical home connections. A common video format such as MP4 is usually easier for relatives to open, but you should still test the exact file on at least one phone and one computer.
- Preserve the original project and highest-quality finished export in two reliable locations.
- Create a smaller viewing copy that still looks good on a television.
- Use a clear filename with the occasion and year, without private information that recipients do not need.
- Watch the uploaded version from beginning to end to catch failed audio, incomplete transfers, or incorrect captions.
- Record where the master is stored and who will maintain it.
Step 5 of 7
Configure access before sending the link
Upload first, then inspect every sharing control. Disable public discovery when it is available, limit downloads if that matches the family’s decision, and set an expiry date for temporary events. If a password is needed, send it through a different message channel rather than placing it beside the link in a public group thread.
Open the link in a private browser window or ask a trusted relative to test it. Confirm that the intended viewer can start playback, hear the audio, read the captions, and switch to full screen. Also confirm that an unintended viewer cannot discover the file through the surrounding folder or account.
Choose an audience before choosing a delivery service. The upload and consent checklist helps document the agreed use; the interactive-map guide explains why a viewer password and a contribution link are different controls. Recheck the actual destination while signed out instead of assuming that a hidden URL is private.
Step 6 of 7
Send a clear family-friendly message
A short note prevents most support questions. Say what the video is, who the link is intended for, whether recipients may download it, when access expires, and how to get help. If the video includes children or sensitive family history, ask relatives not to repost it publicly without checking first.
For collection-stage privacy, use the invitation and upload guidance in Safe Guest Uploads: Privacy, Consent, and Sharing for Group Videos. The sharing decision at the end should match the promise contributors saw at the beginning.
Step 7 of 7
Plan for access changes and long-term preservation
Links break, accounts close, and family contacts change. A streaming link is a convenient delivery method, not the only archive. Keep the master outside the sharing service, document basic names and dates, and review permissions after the event. Remove temporary public-facing copies when they are no longer needed.
Finish line
Route complete: 7 steps
Need to check something again? Jump straight back to any stop.
- 1Define what private means for this video
- 2Choose between a restricted link and a file transfer
- 3Separate the AlbumMap export from family delivery
- 4Prepare a viewing copy and an archive copy
- 5Configure access before sending the link
- 6Send a clear family-friendly message
- 7Plan for access changes and long-term preservation
Put the plan into practice
The best private-sharing setup is easy for the intended family and deliberately difficult for everyone else. Define the audience, choose the right access model, test it as a recipient, and keep a separate archive so convenience today does not become a preservation problem later.
Plan the next part of the project
Before choosing the download link, check how to transfer original videos without avoidable quality loss.
Helpful answers
Frequently asked questions
What is the easiest way to share a large family video?
A restricted viewing link is usually the simplest because relatives can stream the video without downloading a large attachment. Test the link and its access settings before sending it.
Is an unlisted video completely private?
No. Unlisted usually means the video is not openly discoverable, but anyone who receives the link may still be able to open or forward it. Check the platform’s current settings.
Should relatives be allowed to download the finished video?
Allow downloads only when the agreed audience may keep copies. A download restriction can reduce casual copying, but it cannot prevent every screen recording or recall copies already saved. Test the service’s actual controls.
How can I send a private video to relatives who are not technical?
Use the lowest-friction access setting that still fits the sensitivity, provide one clear link, explain any password or expiration, and offer one contact for help.
Is a cloud link enough for long-term family archiving?
No. Keep a high-quality master in at least two reliable locations because links, subscriptions, accounts, and platform policies can change.
