Who can see an online funeral guestbook?

Families ask funeral directors five privacy questions about an online funeral guestbook, and every one of them has a real answer — usually more reassuring than the family fears and less reassuring than the vendors imply. Here are the five, answered from the platforms’ own terms, the regulators’ own alerts, and the research.

Is an online funeral guestbook public?

Only if it’s set to be. Visibility is a dial with four positions — fully public and indexed by search engines, link-only, password-protected, and unpublished — and real platforms ship all four. The problem is that families are almost never shown the dial. At Legacy.com, the default is the loudest setting: Legacy.com’s own privacy policy states that “any information you post or disclose on these Services will be publicly available and visible to other users of our Services and to the general public”. And the far end of the problem is documented by the industry itself: a Canadian funeral-service association advisory warns that some websites “even collect condolences without the family’s knowledge, leaving the bereaved unaware of these comments” — guestbooks running on scraped obituaries, on pages nobody chose. The first question to ask any funeral guestbook vendor is not “is it private?” but “who controls the dial, and does the family see it?”

Who owns what people write in it?

Read the terms, because the answer varies wildly. Signing Legacy.com’s Guest Book grants the platform a “royalty-free, perpetual, irrevocable” license to use, copy, and modify the message — including “the right to use your name”. That is a large thing to hand over inside a two-line condolence, and nobody signing knows they’re doing it. A funeral home choosing a digital guestbook is choosing those terms on behalf of every guest at every service — which makes the license paragraph, not the feature list, the first page worth reading. The stewardship standard worth holding any vendor to is the one we’ve argued the record deserves generally: the family’s record, exportable, not a content library the platform mines.

Is the “burglars read obituaries” story true?

Yes — documented, and unquantified, and both halves matter. Snopes rates the obituary-burglary claim TRUE on the strength of named police cases: Pasadena’s “obituary column” thieves, a 2007 multistate ring, a Kansas City “Funeral Day Burglar” convicted on ten counts. But no agency has ever measured how often it happens, so treat anyone selling you urgency with a statistic accordingly. The practical guidance comes from the government directly: the IRS tells families to “avoid putting too much information in an obituary that identity thieves could use”, and New York’s Department of State names the fields — addresses, birth dates, maiden names, family members’ full names — that feed “ghosting,” identity fraud against the recently deceased. Nobody has settled the right split, but a defensible one looks like this: the public page carries the story; service details ride a link the family shares; and the guestbook record — names, relationships, contact information — lives behind the family’s dial, not on the open page.

What about trolls and scammers?

Both are real, and both have known shapes. The research on memorial-page abuse reached a blunt conclusion: in the definitive study of Facebook memorial trolling, the only page that stayed clean was the family’s official page — the one publishing no visitor commentary at all; “save for pulling the page entirely, lockdown was the only option”. Open comment sections on grief pages get tested; pages someone controls hold. The scammers work the other direction: the FTC has warned about imposters who call grieving families claiming the funeral will be canceled unless they pay again, and the 2024 variant is a fake “watch live” link posted under a real service notice, built from details stripped off the funeral home’s own page, ending at a credit-card form. A funeral home can’t stop either cold, but it can moderate its guestbooks, watch the comments under its own notices, and tell families at arrangement time: any surprise payment call gets verified by calling the funeral home back at the number the family already has.

What happens to all of it later?

Later is where the honest answer gets uncomfortable: the law mostly leaves. GDPR “does not apply to the personal data of deceased persons”; US privacy law is written around living people, with health records the narrow exception. Platform “memorialization” is a freeze, not a protection — a memorialized Facebook profile stays visible to whoever it was shared with, and without a legacy contact it can’t be changed at all. So whatever privacy a family’s guestbook has in year five comes from exactly two places: the vendor’s terms and the funeral home’s stewardship. That is not a reason to avoid a digital funeral guestbook — the record it keeps is the most useful thing the service produces — it is the reason the funeral home, not the family, should be the one reading terms with cold eyes, because the funeral home is the party doing it more than once.

The five answers, kept

Is it public? Only if the dial says so — insist on seeing the dial. Who owns the words? Whoever the terms say — read the license paragraph. Do burglars read obituaries? Sometimes, provably — keep addresses and birth dates off the public page. Trolls and scammers? A controlled page holds the wall, and forewarned families call back before they pay. And later? The law leaves early — which makes the vendor’s terms and your stewardship the whole of the promise. A funeral home that can answer these five questions at arrangement time is telling the family, accurately, that someone thought about their week five years from now.