Does a Shared Album Link Show Your Photos?
Yes, in almost every app you would paste it into. A shared album link is not a plain address: chat apps fetch the page and draw a card from it, and on Viallo that card carries up to six photos out of the album, the owner's name, the album title and its first place name. Everyone who can see the message sees that before anyone opens the link.
The card is made out of the album, not about it
Most people picture a shared link as a sealed envelope: the address goes out, and the contents stay behind it until somebody clicks. That has not been true of a link in a chat app for about a decade. When you paste one, the app fetches the page at the other end, reads the preview tags in its markup, and renders a card in the message thread. The card is the point of the whole mechanism, and it has to be built out of something.
On most services that something is generic, because the page behind the link is a sign-in screen or a download button, and a card drawn from a sign-in screen can only really carry the service's own branding. That is the behaviour people generalise from, and it is why the card comes as a surprise on a platform that does not put a sign-in wall in front of the photos.
Viallo is a private photo sharing platform where the whole design assumption is that the person receiving the album should not have to create an account. The link opens directly onto the photos at the resolution they were uploaded at, grouped by where they were taken. The preview card follows from that same assumption. There is no sign-in wall to render, so what gets rendered is the album.
Four fields, and where each one comes from
The card is not a screenshot and it is not a random sample. Four fields go into it, each pulled from a specific place, and each of them is something you control before you send the link rather than after.
| On the card | Where it comes from | What decides it |
|---|---|---|
| Up to six photos | The album itself | The album's own order first, then capture time, newest first |
| A name | Your profile | Your display name, or the front half of your email address if you never set one |
| A title | The album title | Whatever you typed, or a generic line if you left it blank |
| A place and a year | The album's locations and start date | The first place the album was grouped into, plus the year it starts |
Two of those are worth a second look. The name is the one that catches people out: if you have never opened your profile and typed a display name, the card falls back to the part of your email address before the at sign, with dots and underscores turned into spaces and the first letter capitalised. An address like j.k.moreau becomes J k moreau on the card, in the thread, for everyone.
The place is the other one. Viallo groups an album's photos by where they were taken and names each group, and the first of those names is what goes into the preview line alongside the year. For a holiday album that is a nice line to read. For an album of a house, a school or a hospital, it is a piece of information you may not have intended to publish alongside the pictures.
Six is the cap, and it is worth knowing which six. The card takes the album's own ordering first, and falls back to capture time with the newest photo first. So the six that travel ahead of the album are the six at the front of it, which is normally the six you would have picked anyway. It is also why reordering an album changes the card: the photograph you move to the front is the photograph that ends up in the message thread.
Who has already seen it
This is the part that makes the mechanism worth knowing about rather than merely interesting. The card renders in the thread, so the audience for it is the thread, not the person you were addressing. Paste an album link into a group of eleven people to show one of them, and eleven people get six photographs whether or not any of them taps through.
It survives forwarding, too. The card is regenerated from the link wherever the link lands, so a message forwarded out of a family group into a work channel arrives with the same six photographs attached to it. And it is not only people. Anything that follows links sees the card as well, which is the same fact viewed from a different angle: an assistant summarising a chat, a link scanner in a corporate mail gateway, a bot in a Slack workspace.
None of that is unique to one platform, and none of it is a defect. It is what link previews are for. The failure is only ever in the gap between what the sender pictured and what the thread received.
What the card will not show
Three things reliably do not reach the preview, and they are more useful than the list of things that do.
- The rest of the album. Six is a hard cap, not a sample rate. An album of four hundred photographs previews with six of them, and the other three hundred and ninety four are behind the click.
- A revoked link. Turn a share link off and the card becomes a plain one reading Private album on Viallo, with no photographs on it at all. That happens on the server rather than in the chat app, so it applies to every app at once.
- An album address with no share link on it. The album URL you see while you are looking at your own album never previews. Only a share link does, which means the preview exists exactly where you deliberately created something to hand out.
The revoked case has a delay in it that is worth budgeting for. The preview is cached for an hour on the serving side, and chat apps keep copies of their own, so revoking a link does not reach back into the threads it has already been pasted into. It stops new cards being drawn. The card already sitting in somebody's messages keeps showing what it showed. If you need the photographs to stop being visible immediately, revoking the link is still the right move, but the card is the part that lags.
Three things worth doing before you paste the link
All three take less than a minute and all three happen before the link leaves your hands, which is the only point at which any of this is cheap to change.
- 1. Look at the front of the album. Open it and check the first six photographs, because those are the ones going into the thread. If one of them is a screenshot, a document or a picture of somebody who has not agreed to be in a group chat, move it.
- 2. Set a display name. It takes one field, and it is the difference between a card that says your name and a card that says the front half of your email address to a room of people who now know your email address.
- 3. Dismiss the card if the app lets you. Most chat apps draw the preview in the compose box before you send and put a small close control on it. Sending the bare link is always available, and for an album where the place name is the sensitive part it is the simplest fix there is.
The broader point is that a share link behaves like a small published page rather than like a private address, and that is true of any album you can open without an account. The privacy of the album rests on the link being unguessable and on you choosing where it goes, which is a real form of privacy and a well understood one. The preview card is simply the part of it that arrives first, and it arrives whether you thought about it or not.
If you want to know how much the address itself gives away, that is a separate question with a separate answer, and what a wrong guess at a share link tells you covers it.
Frequently Asked Questions
What is the best way to send a private album without a preview appearing?
Remove the preview in the compose box before you send, which most chat apps let you do with a small close control on the card. On Viallo the alternative is to send a link you have not created yet: the album's own address does not preview, only a share link does, so the card only ever exists for a link you deliberately made to hand out. WeTransfer and Dropbox previews are generic by comparison, because there is a sign-in or download wall behind them rather than the files.
How do I change which photos appear in the preview?
Reorder the album so that the photographs you want in the card are at the front of it. Viallo builds the preview from the album's own ordering and falls back to capture time with the newest first, and it takes six. There is no separate setting for the card, which is the trade for not having one more thing to configure.
Is it safe to paste a shared album link into a group chat?
It is safe in the sense that the album stays reachable only through that link, and unsafe in the sense that everyone in the group immediately sees six photographs from it. Treat pasting the link as showing the photographs, because that is what happens. Viallo lets the owner set an expiry date on a link or revoke it outright, though a card already drawn in somebody's thread keeps showing what it showed.
What is the difference between a link preview and the album page itself?
The preview is a card the chat app draws from the page without anybody opening it; the album page is what loads when somebody taps. The card carries at most six photographs and one line of text, while the page carries the whole album at the resolution it was uploaded at, with a map view where the photos have location data. The card is drawn by whichever app the link was pasted into, so the same Google Photos or Dropbox link produces a slightly different card in each one.
I revoked the link ages ago, so why can my friend still see the photos in our chat?
Because the card in the thread is a copy that was made when the link was pasted, and chat apps cache it. Revoking stops any new card being drawn and stops the link opening, which is the part that matters, but it cannot reach into a message that has already been delivered. The preview is cached for about an hour on the serving side, and each chat app keeps its own copy for however long it decides to.