Gallery privacy options

Sensitive client work needs Private portfolios—files uploaded into that collection use private storage, show a lock, and cannot be embedded on public pages. Start with Private portfolios if your goal is true client-only masters.

Other controls still matter, but they mean different things:

Control	Effect
Private vs Public (create)	Private storage vs public CDN path
Enable public page	Whether /portfolio/{slug} is published
Portal Manager invitation	Who may open the client room
Resource collection	Portal packaging—not private object storage by itself

Prerequisites

Dashboard → Portfolio → New Portfolio (Public / Private)

Authenticated clients: Dashboard → Portal Manager → Invitations

Implementation steps

1. For client proofs or NDA work, create a Private portfolio and upload into it — Private portfolios.
2. Confirm the lock icon on the collection and on uploaded media.
3. Invite the client in Portal Manager with access to that gallery.
4. Keep Enable public page off for Private collections (forced at create).
5. For marketing showcase, use a Public portfolio and enable the public page when ready.
6. Do not treat “public page off” alone as private storage for files already on the public CDN path.

What you'll see

Private collections stay out of the page editor portfolio pickers. Portal pickers still list them with a lock. Public collections behave like normal site galleries.

When portal invites are required

Shared links and passwords (if you use link-style sharing elsewhere) are only as strong as the channel you send them on. Use Portal Manager for authenticated client rooms when the gallery contains sensitive or high-value work.

Verifying your setup

• Client-only jobs use Private create, not only “public page off.”
• Portal invite tested for the Private gallery.
• Page editor cannot select the Private portfolio for a site block.