Protected by how the site is built, not just by a promise
Only families who have published their own profile can browse.
Photos live in private storage and are served through short-lived links.
A contact number is shown only to a family that has opened that profile with a credit.
Any profile can be reported and the committee reviews every report.