How to Create a Private Online Photo Gallery

What makes an online photo gallery actually private

A photo gallery is private when only the people you send the link to can open it, search engines don't index it, and the platform doesn't use your images for advertising or AI training. The first of those is easy to check, so it is the one to spend least time on.

Google Photos is the case worth knowing, because a lot of advice about it is out of date. Google's own privacy page says Google Photos doesn't use your photos and videos for ads and doesn't sell them, and offers an opt-in that makes Photos data available to other Google services that support ads (Google Photos privacy). What its sharing help does not document is a password on a shared link, or a switch that stops a viewer downloading.

The useful question for any service is what its own pages commit to, so the table below asks four of them the same five questions.

Step-by-step: create a private gallery with Viallo

Viallo is a private photo sharing platform built for this use case. Here's the full process from account creation to sharing a protected gallery:

• Step 1: Sign up at viallo.app (free plan includes 2 albums, 200 photos, and 10 GB of storage)
• Step 2: Create a new album and give it a name
• Step 3: Upload your photos - Viallo keeps the original file, except that a HEIC photo is kept as a JPEG
• Step 4: Open Share. A View only link is ready as soon as the sheet opens, at an unguessable 16-byte address. Under Links to this album, every link's menu has Revoke, and the Admin link can also be given an end date
• Step 5: Copy the link and send it to whoever you want. They'll see the full gallery - lightbox view, location grouping, map view - without creating an account or downloading an app

A single upload takes a file up to 8 MiB; anything larger goes up in parts, so the size of the photo is not the thing that decides whether it can be shared. Photos with GPS data are grouped by place on the interactive map view.

Comparing private gallery options

Every cell below was read on 26 October 2026 from the service's own help page (Google Photos, Apple Shared Albums, SmugMug gallery privacy) or, for Viallo, from its code. Not documented means the page read that day lists no such option.

All four open a shared album through a link without a viewer account, so that alone is not a reason to pick one. The differences are the other three rows. SmugMug is the only service here that documents a password on the gallery, Viallo the only one that documents a switch turning downloads off per link, and iCloud documents no way to cut the link itself, only removing a subscriber.

For most people sharing with family and friends, Viallo's free plan covers the case (2 albums, 200 photos, 10 GB) and Plus is $6.99 a month. Photographers delivering to clients get more from SmugMug, whose help documents invitation-only galleries, passwords, and a commerce section with pricelists and backprinting (SmugMug privacy settings).

Access control features that actually matter

"Private" means different things on different platforms. These are the parts worth comparing before you upload anything.

Unguessable private links

The simplest form of access control is a link nobody can guess. Viallo gives every album's share link a 16-byte hex address, so only people you send it to can open it. Google describes a shared link as a URL that people can't guess on their own (Google Photos sharing controls). SmugMug goes a step further with optional passwords; Google Photos and iCloud document none.

Link-based access without accounts

All four services here open a shared album for a viewer who has no account, so a link that works without a login is a baseline rather than a selling point. The question that still separates them is what happens after you send it: whether you can cut the link, and whether the viewer can download the originals.

Revocable sharing

If you shared a gallery with an ex-partner or a client whose contract ended, you need the ability to cut access immediately. On Viallo, open the album's Share window and choose Revoke in that link's menu under Links to this album: the address stops working at once for anyone opening it without an account, and they get a page saying the link was turned off. People you invited by email are managed separately, under Invite by email. Create then makes a new link, with a new address, for the people who should keep access.

Revoking a link stops new access. It does not reach a copy someone already saved: Apple says photos saved from a shared album stay in the recipient's library even if the album is deleted or its owner stops sharing, and Google says a saved shared photo is a copy in the recipient's library. Treat a link as something you can close, not as something that takes a photo back.

Download controls

Some situations call for view-only access where recipients can't save the original files, especially for photographers sharing proofs with clients before payment. On Viallo, open the View only link's menu under Links to this album and clear Allow download; that link then browses with no download option. Only the View only link carries the switch. SmugMug's documented control is different: its Pro plans can cap how many images a client may download, rather than turn downloading off (SmugMug client downloads).

Common use cases for private galleries

Different situations call for different levels of privacy:

• Family photos: Share new baby photos or holiday gatherings with extended family without posting publicly. A private link is enough, and viewing without an account matters for the less tech-savvy relatives.
• Travel documentation: Create a private trip album with map view showing your route. Share with travel companions or keep as a personal archive.
• Client delivery: Photographers sharing proofs or final deliverables. Revocable links and download controls are the two features that matter here.
• Event documentation: Wedding photos, corporate events, school functions - share with attendees without making photos publicly searchable.
• Sensitive content: Medical documentation, insurance claims, property records. A service that runs no AI on your uploads, and a link you can cut, are what to look for.

What to avoid when creating a private gallery

Some common approaches to photo sharing that feel private but aren't:

• Google Drive public links: a file shared as Anyone with the link opens for anyone who has the link, without signing in to a Google account (Google Drive sharing). That is file sharing, not a gallery, and there is no per-viewer control.
• Email attachments: no access control once sent, and a copy you can't delete on the recipient's side.
• WhatsApp or messaging app groups: a group chat is not access control. Everyone in the group can save a photo and forward it, and nothing you do later takes it back.

How was this checked?

On 26 October 2026 this post read the help pages of Google Photos, Apple Shared Albums and SmugMug, and Viallo's code at origin/main, for the five properties in the table: who can open a shared link, whether the link takes a password, whether the owner can cut it without deleting the album, whether downloads can be switched off, and how much storage is free. Where a cell says not documented, the page read that day lists no such option, and the script checks for the word as well as for the quoted sentence. The table is dataset.csv, the same rows with the sentence and URL behind each cell are in dataset.json, and check.py fetches every page again and reports any sentence that is gone.

Frequently Asked Questions