Help Private galleries

This page is generated from docs/aide/en/: it is also the admin’s online help (“Help” menu). Edit it in the repository, not here.

A private gallery shows chosen photographs to invited people, and to them alone: the proofs of a session for the client, work in progress for a publisher, a story for relatives. Each person receives an access: a personal link and a password, which you give them through two different channels (the link by email, the password by text message or by voice). Menu: Publish › Private galleries. Each photographer sees their own galleries, the administrator all of them; the moderator and the proofreader have no access.

Creating a gallery

New gallery: a title (in English and German if your guests read these languages), an optional welcome note, and the closing date (one year at most). A gallery shared by both photographers only exists for accounts that see all galleries.

• Photos: the Photos tab adds photos from the library, drafts included (they keep their status: nothing is published). Each photo shows its private use: ● ready (no face, or a reliable “exhibitions and prints” consent), ▲ to check (a face without consent, a consent for the website only), ✕ blocked (a refusal: it cannot be added, and a photo refused later disappears from the gallery). A photo to check stays hidden from guests until you confirm it: Confirm private use shows it and keeps your confirmation; the gallery page says how many photos are hidden. Move up and Move down set the order guests will see.
• Open: a gallery starts as a draft (team only); Open the gallery makes its accesses valid. On its closing date, it closes on its own and all its accesses stop working.
• View as a guest: the gallery as an invited person will see it, with a “Team view” banner; nothing is recorded.
• With the All EXIF from the original setting (Watermark & EXIF), images keep the GPS: the private gallery does not serve them, the Photos tab says so.

Giving an access

New access: the person's name (only you see it, it is encrypted), one person (personal link, by default) or a group (the same link for several people, flagged in the list), the gallery language for them, the end of access (30 days by default, 6 months at most, never after closing; two quick choices) and their rights: choose favourites, download the photos at 2,048 px, and in large size up to 4,000 px. The person sees the ready or confirmed photos, with the site watermark, downloads included (the same as the website's); never the original nor the GPS.

Create the access shows the link and the password only once (12 characters in three groups, without 0, O, 1, I or L), with two messages ready to copy: the link message, to send by email, and the password message, to send by text message. The site sends no email: you pass them on yourself. Once left, the page cannot be read again: only fingerprints of the link and password are kept. Sending the form again (F5, Back) does not create a second access.

Following an access

The Accesses tab gives one line per access: its rights, its end, its last visit, its status (◐ sent, not opened; ● opened; ▲ paused, suspended, or expiring in 3 days; ✕ expired or revoked). The page of an access shows:

• the figures: opening (the password accepted, not the mere link: an email antivirus often opens the link before the person), last visit, devices (flagged in “Today” above 3: the link may have been passed on), favourites;
• their selection: the favourites in the order they were chosen, Export the selection (CSV) (original file names), and Reopen the selection after it was sent. Opening the page freezes a sent selection: the person can no longer take it back alone;
• the activity: visits, refused passwords, pauses, favourites, downloads, with the network (truncated IP address) and the country; never the browser;
• the settings: extend (same link, same password), widen or narrow the rights; New password… (the link stays; a pause or suspension is lifted); New link… (the password stays; the old link stops working at once);
• Revoke access…: the link and the password stop working at once, even in a gallery already open on the person's side; Delete the access and its data…: everything about it is deleted.

Security and data

• Tries: 5 refused passwords in a row give a one-minute pause, 10 a 15-minute pause, 30 suspend the access (flagged in “Today”) until you unblock it. Unblock access or New password… reopen it.
• In the person's browser: the gallery stays open 12 hours without a visit and 7 days at most, or 30 days with “Remember this device”; never after the end of access. Leave the gallery closes it.
• Private pages: never indexed, never cached, with no link to another website; images are only served to a session allowed to see them, never through the public address of photos.
• Log: every access created, widened, extended, unblocked, revoked or deleted is recorded in the Log with its number (never the link, the password or the name), as is every reading of an access page or of the activity; the Vigie, if running, receives it too.
• Retention: everything about an access (name, activity, favourites, selection) is deleted six months after it ends; a person can ask for earlier deletion (Delete the access and its data…).