Memorial Portrait Metadata: Private Archive vs Public Display Questions

Direct answer and scope

The supplied guidance supports asking separately what descriptive metadata should accompany a private preservation copy and what, if any, metadata should be displayed publicly. The preservation question is what information should accompany a private copy so that the files can be identified and located later. The display question is different: which information, if any, should be deliberately shown to other people. Guidance for personal digital photographs supports descriptive file names, tags, organized folders, and a brief explanation of the structure. National Archives guidance likewise describes basic information about who, what, where, and when as useful for identifying and finding files later.

That guidance does not decide what belongs on a public memorial display. It supports a private decision to separate preservation metadata from display metadata. A person can ask for a private archive record and separately ask whether a proposed public label, caption, biography, relationship, date, place, or story should be omitted unless deliberate display has been chosen. The available evidence does not authorize collecting or publishing those memorial details.

The scope here is limited to questions about descriptive metadata, purpose, minimization, retention, data flow, processors, safeguards, disposal, and incident planning. It does not establish copyright, ownership, permission, privacy-law coverage, security, compliance, permanence, or the capabilities of any vendor or platform.

How to use the official evidence

Use the California Attorney General's current CCPA information for questions about the right to limit certain uses and disclosures of sensitive personal information by covered businesses. That source should be read together with the business's disclosed practices. The supplied evidence does not classify a memorial image, story, relationship, account, photograph, or deceased person's data as sensitive personal information, and it does not determine whether a particular right applies.

Use California Privacy Protection Agency guidance to ask an applicable business to state the purpose and retention basis for each data category used in a portrait or hosted memorial service. The stated rule concerns collection, use, and retention that are reasonably necessary and proportionate for disclosed purposes. The evidence does not evaluate necessity or proportionality and does not establish that an unidentified business is subject to the CCPA.

Use the FTC business guide as a source for organizing questions, not as a certification of a business. Its headings support questions about the information inventory, reducing what is kept, protecting retained information, disposing of information that is no longer needed, and planning for incidents. Separate questions should address where information is stored, how it moves, who receives it, and which outside service providers participate.

Use personal-archiving guidance for the private organization question. File-naming, descriptive-tag, folder-structure, and folder-manifest questions can help define what preservation information is wanted without requesting the underlying memorial details. The evidence does not support asking a visitor to submit names, relationships, dates, locations, descriptions, tags, filenames, folders, photographs, or other metadata.

Decision framework

Start with the private-archive purpose. Ask what category is being considered, whether it is needed to identify or find a preservation copy later, and whether the same category is proposed for public display. File-naming, descriptive-tag, folder-structure, and folder-manifest questions can be recorded without entering the underlying values. Keeping the category question separate from the value avoids turning an organizational checklist into a request for memorial information.

Next, separate public-display approval from private preservation. For every proposed display field, ask whether display has been deliberately chosen, where the display would occur, who would receive it, and whether the field can be omitted while preserving the private copy. The supplied evidence does not say that names, dates, places, relationships, stories, photographs, or descriptions should be displayed, so those choices remain unresolved rather than being treated as approved.

Then ask about data minimization and retention. An applicable business can be asked why each category is needed, what disclosed purpose supports its collection and use, what retention basis applies, and what the written disposal term says. The FTC guidance also supports asking what is kept after the service activity, how information no longer needed is disposed of, and how retained information is protected. These are questions for the business; they do not establish that its answers are adequate.

Finally, map the flow. Ask about hosting, support access, export, backup, disposal, and outside processors without naming or assuming any provider. The requested answers should identify where information is stored, how it moves, who receives it, and which outside services participate. If an answer is missing, keep that item unresolved. The supplied methodology does not convert an unanswered status into a positive conclusion or calculate a vendor score.

Limits and what to verify next

The supplied evidence does not validate any portrait artist, digital-memorial vendor, hosting platform, QR provider, domain operator, processor, product, feature, account control, export process, file format, backup, restore, privacy practice, succession path, price, availability, review, rating, or turnaround term. Accordingly, a question list can identify topics for verification, but it cannot compare providers or state that a provider has answered them.

Verify the business's status before applying California-specific privacy questions. Then request current written disclosures covering purpose, collection, use, retention, disposal, recipients, outside service providers, access, protection, and incident planning. The FTC guide supports treating these as connected responsibilities rather than treating one privacy-policy statement as a complete answer.

Do not treat an unanswered field as private, secure, deleted, exportable, backed up, permanent, compliant, or ready. Do not infer a data-flow answer from a product name, a general policy, possession of a photograph, or an assumption about how a platform operates. The supplied methodology keeps contract, copyright, privacy, export, backup, QR, and continuity questions unresolved when evidence is absent.

The validated in-page organizers are described as anonymous organizers with controlled selections that reset locally and are not sent to the publisher. They do not accept the listed personal, memorial, image, account, vendor, filename, upload, payment, or biometric inputs. That statement describes the validated tools and does not approve the privacy or security practices of any outside business.

Questions people ask

The questions below preserve the distinction between private descriptive organization and deliberate public display. They are prompts for gathering current evidence, not conclusions about a business, platform, memorial, file, or display practice.

Evidence behind this page

Each point below is restricted to what the cited primary source supports. Administrative listing status is not a quality endorsement.