Albums, and who can see what is in them

An album is a name and an order over photos you already have. Nothing is copied into it. The rule that matters: an album can restrict what somebody sees, but it can never widen it. A photo only visible to your Inner Orbit stays invisible inside an album you shared widely, and a widely-visible photo stays invisible inside an Inner Orbit album. The narrower of the two always wins. Because of that, the number of items shown on an album is what that person can actually open, not the true total. It would not be much of a privacy rule if the count told people how much was being kept from them. Sharing an album with someone lets them open the album itself, and gives them one of two roles: a contributor can add photos and take their own back out, and a viewer can look. Being invited to an album does not give anyone access to photos inside it they could not already see. Removing, moving and deleting only ever affect the album. Taking a photo out of an album, moving it to another, or deleting the album does not delete the photo — it stays where it actually lives.