Memorial Website Privacy Settings: How to Protect a Tribute Page

Why Privacy Matters More on a Memorial Page

A memorial page contains exactly the kind of content that attracts problems: a real person's full name, dates, location, family relationships, and photos. That combination is valuable to identity thieves, obituary piracy sites, and spam bots.

Obituary piracy is a documented industry. Predatory companies crawl funeral home directories and memorial platforms, copy the obituary text and photos without permission, and republish them on ad-monetized sites. They use SEO to rank above the original page, tricking friends and family into visiting the pirated version, where they're shown banner ads and prompted to buy low-quality floral arrangements.

Beyond piracy, public memorial pages attract spam guestbook comments, scam solicitations, and occasionally trolls. A few minutes spent configuring privacy settings prevents weeks of cleanup.

The Three Privacy Levels

Most memorial platforms offer three options. Choose based on who you want to reach.

Public. The page is indexed by search engines. Anyone searching for the person's name may find it. This works when the deceased was a community figure — a teacher, a business owner, a long-time volunteer — and the family wants acquaintances and former colleagues to find the memorial on their own.

Unlisted. The page exists but doesn't appear in search results. Only people who have the direct URL can access it. This is the most common choice. You share the link in the funeral program, in emails to friends and family, or in a private group chat. Strangers won't stumble onto it through Google.

Password-protected. Visitors need a password to see any content. The family shares the password along with the link. This works for pages with intimate content — personal letters, family-only photos, candid stories that aren't meant for public consumption.

Start with unlisted if you're unsure. You can open it to public later once the content is reviewed and the guestbook moderation is in place.

Comment Moderation: The Non-Negotiable Setting

Enable comment moderation before sharing the page link with anyone. This means every guestbook post goes through the page administrator before it becomes visible.

Without moderation, a public memorial page can accumulate spam comments within days — SEO link spam, cryptocurrency scams, and bot-generated condolence messages that link to commercial sites.

Moderation takes two minutes a day during the active period (the first two weeks after the death, when most visitors leave messages) and drops to a few minutes per month after that.

Assign a moderator who isn't in the immediate circle of grief. A tech-comfortable friend, an adult child's partner, or a colleague can review pending comments daily without the emotional weight of reading condolences while actively grieving.

Protecting Against Identity Theft

Obituaries are a known vector for identity theft. Fraudsters use them to file fake tax returns, open credit accounts, or claim Social Security benefits in the deceased person's name.

Protect the memorial page by omitting specific identity markers:

• Never include the full birth date — use the year only, or omit it entirely
• Never include the mother's maiden name — this is a common security question for financial accounts
• Never include the Social Security number — it sounds obvious, but funeral programs sometimes print it for estate contacts
• Omit the street address — list the city and state, not the home address, especially if the home will be empty during the funeral

These omissions don't diminish the tribute. No visitor needs the deceased's mother's maiden name to remember their life.

Platform-Specific Privacy Features

Some platforms offer privacy features beyond the three basic levels:

Invite-only access. The administrator sends invitations to specific email addresses. Only those addresses can view the page. This is stronger than password protection because the password can be shared, but an invite is tied to an individual.

Selective photo privacy. Some platforms let you set individual photos or albums as private within an otherwise public page. This works when you want the biography and guestbook public but keep family photos restricted.

Search engine blocking. A technical setting (robots.txt or meta noindex) that tells search engines not to index the page. This is different from unlisted — unlisted pages may still be found if a search engine discovers the URL through a link on another site.

Guestbook approval workflows. The most granular platforms let you approve, edit, or reject each comment individually, with optional email notifications when new posts arrive.

The Annual Privacy Check

Set a calendar reminder to review the page's privacy settings once a year:

1. Check pending guestbook comments and approve or delete them
2. Verify the page's privacy level still matches the family's wishes
3. Review who has administrator access — remove anyone who no longer needs it
4. Export a backup of all content (photos, guestbook entries, biographical text)
5. Verify the hosting account is active and the payment method hasn't expired

The memorial website toolkit includes a privacy configuration guide for each major platform, plus an identity-protection checklist specific to obituaries and memorial pages.