Maintenance
Part of Deletion, Moderation, Archives: What Copies Persist Online
Ownership, consent, platform license, audience, tags, downloads, reuse, reporting, deletion, and archive checklist
A working checklist for image ownership, consent, platform licenses, audience controls, reporting routes, deletion limits, and publication records.
What to take away
- Verify the file and its owner first. Then verify authority over every recognizable person in it.
- A platform license is wider than the permission you hold from a subject. Check both against your planned reuse.
- Audience, tags, downloads, remixing and paid promotion are separate controls. Set each one.
- Match the report to the facts. Copyright, privacy, impersonation and safety routes have different evidence rules.
- Deletion is a feed action. Embeds, caches, partner copies and backups need separate requests, and a dated record.
This is an operational review, not a legal conclusion. Terms, statutes and platform rules change. Confirm the current version for your service, account, region and post type, and take advice from a licensed attorney on anything that matters.
How to run the checklist in order
- Identify the asset and its owner.
- Confirm person-level authority for this purpose.
- Read the platform terms you are accepting.
- Set audience, tags, downloads and promotion.
- Fix credit and license notices.
- Gate the reuse you plan.
- Log reporting, deletion and archive steps.
Work in that order, because each step can stop the next one. A missing release ends the review before you reach tags. Repeat the whole pass before a new platform, a paid use, a material edit or a partner change.
Asset identity and ownership checks
- The original file, the device or app that produced it, and the earliest dated copy.
- A written assignment or license that names this image and this use.
- Every later edit, crop or synthetic alteration, with its author.
- The live post URL and the account that controls it.
- Copyright registration status, because U.S. statutory damages and attorney fees can turn on it.
Ownership and the right to publish are separate questions. A photographer who owns the copyright may still need a release before a commercial use of a portrait. The comparison of model release, property release, license and assignment sets out which document supports which claim.
Asset identity and ownership
- Original file, creator, capture date, source known
- Copyright owner or licensor verified
- License covers reproduction, display, editing, upload
- Work-made-for-hire and agency claims documented
- Music, artwork, logos, location restrictions cleared
- File not from unknown download or screenshot
Consent release: the elements a release has to contain
- Partiesthe person who will be shown, and the account or company that will publish the image.
- Signature and date from the subject. Where the person is a minor, a parent or guardian signs.
- Scopewhich images, which uses, which channels and which edits.
- Termwhen permission starts and when it ends.
- Revocationwhether consent can be withdrawn, on what notice, and what happens to copies already published.
- Considerationwhat the subject receives in return, whether money or something else of value.
- Any limits the subject sets, such as no paid promotion, no third-party reuse or no cropping.
A release that names the image, the use and the term is the document that answers a take-down demand. A caption credit is not a release, and neither is a verbal yes at the shoot.
Platform license versus uploader authority
| Question | What to read |
|---|---|
| What does the platform take? | The content license clause, including sublicensing and duration |
| Who grants it? | The uploading account, not the person pictured |
| Does it cover advertising? | Separate ad terms and sponsorship disclosure rules |
| Does deletion end it? | Survival clauses, plus cache and partner retention |
The platform license comes from the uploader, not from the person in the image, and it cannot cure a missing release. Instagram's Terms of Use, TikTok's Terms of Service and OnlyFans' terms each take a broad, worldwide, royalty-free, sub-licensable license in what you post; read the term and the sublicensing and derivative-works language in the clause that applies to your account before you treat hosting as permission. None of it gives you rights to reuse another creator's image off-platform.
Where two creators share a shoot, write the split down before anyone posts. The collaboration checklist on parties, scope, term and approval shows how to record who holds which rights.
Post controls: audience, tags, downloads and promotion
- Audiencepublic, followers, close friends or link-only.
- Tags and mentions, including handles, place names and companions.
- Download and remix permissions, set per viewer type.
- Comment, duet, stitch and share settings.
- Sponsored label and disclosure where money or free product is involved.
A private audience setting does not undo a public tag. Download and remix permissions travel with a shared post. Paid promotion adds disclosure duties on top of consent.
Post controls
- Audience is narrowest that meets purpose
- Tags, mentions, location, alt text checked
- Comments, downloads, embedding, remixing configured
- Account and authorized staff correct
- Publication and expiration dates scheduled
- Paid boosting and affiliate tools off unless authorized
Reuse gate before reposting
- Name the actionshare, repost, embed, screenshot, download or reupload.
- Compare the new account, audience, platform, purpose, sponsor, caption, crop and term against the original scope.
- Confirm the original is still live and has not been corrected or removed.
- Confirm the creator and the recognizable person have not objected.
- Record any new permission and fee before publication.
These actions carry different exposure. The comparison of upload, repost, share tool, embed, screenshot and off-platform reuse explains why an embed is not the same as holding the file.
Reporting routes and evidence
- Preserve the live URL, account, post ID, timestamp and screenshots.
- Confirm you are the right claimant or an authorized representative.
- Match the route to the issuethe platform's in-app report, a privacy complaint such as YouTube's privacy complaint process, a DMCA copyright notice to the host, or a referral to law enforcement.
- Log case numbers, responses, appeals and dates.
- Handle immediate safety needs before a long rights dispute.
YouTube runs a privacy complaint process for people who appear in uploaded content. Reviewers weigh consent, public interest and newsworthiness. That is a platform policy route. It does not guarantee removal and it does not close off other remedies.
For copyright, the U.S. Copyright Office sets out the notice and counter-notice process under 17 U.S.C. § 512(g), including what happens when material was removed by mistake. Its DMCA overview is the place to start a statutory takedown.
In California, non-consensual distribution of intimate images carries a civil remedy. Read the text of California Civil Code section 1708.85 before you file. Canada treats the same conduct as an offence under Criminal Code section 162.1, and Manitoba adds protection orders under its Intimate Image Protection Act.
Federal law adds a civil action for the unauthorized disclosure of intimate images at 15 U.S.C. § 6851. That route belongs to the person shown in the image. A creator who holds only the copyright files under copyright instead.
Two image-specific tools do work that a general report does not. StopNCII hashes an intimate image on your own device and asks participating platforms to block or remove matching copies without the image ever being uploaded. NCMEC's Take It Down does the same for people under 18.
Gather the document that proves your position before filing. Reports fail when the claimant cannot show what rights they hold.
If someone is threatened or extorted with intimate images, contact the platform safety team and law enforcement, and use a named support line such as the Cyber Civil Rights Initiative (CCRI) helpline or the RAINN National Sexual Assault Hotline. Do not approach a suspected uploader yourself.
Deletion, embeds and archive records
- Search live post, scheduled post, ad, story, highlight, direct message, library copy and device download separately.
- Check embeds, previews, caches, partner copies and search results.
- Send each request to the right deskthe platform's trust-and-safety or privacy team, each host of an embed, the search engines that index the page, and any partner holding a copy.
- Document backup, legal-hold and policy retention limits accurately.
- Keep participant and copyright records for the authorized retention period, and name that period in the record so its end date is visible.
- Revoke access and record the disposition.
Removing a post clears the feed. An embed that already points at the URL may break or persist depending on the platform. A partner copy is a separate request to a separate party.
Withdrawal is harder than posting. The image consent checklist covering purpose, boundaries, reuse and withdrawal explains how to keep records that survive a deletion request.
An archive that outlives the post needs a format and a standard. Export signed releases as PDF/A, an archival PDF profile that does not depend on the app that created it, and write the rights terms into the file's XMP or IPTC metadata so the terms travel with the image. Retention limits come from the platform terms, your own policy and any legal hold; record the period instead of leaving it open.
