Back to the blog

AI & privacy

How private selfie search changes event photo delivery

Why showing guests only the photos they appear in is different from adding search to a public gallery.

Published 2026-08-23 · 6 min read

At a large wedding or corporate event, a guest may appear in only a handful of thousands of photographs. Selfie search removes the scroll, but the privacy model matters just as much as the matching speed.

Search is not the same as access control

A search filter can hide unrelated photos in the interface while still allowing the browser to request them. A private matched gallery should enforce the result on the server so the guest session can only retrieve approved photo IDs.

That distinction is invisible when everything works, but it is the foundation of a trustworthy guest experience.

What photographers should be able to control

Face matching should be optional per event. Photographers also need clear download permissions, a way to remove guest data and an understandable consent moment before a selfie is processed.

  • Enable or disable selfie access per gallery.
  • Keep full-gallery client access separate from guest access.
  • Restrict guest downloads to matched photographs.
  • Explain how selfies and face data are retained and deleted.