Before Your Matterport or Other 3D Tour Goes Public: A Privacy, Security & Approval Checklist
Updated: Sep 12
A Matterport or other 3D tour can let someone examine a business, museum, historic site, community amenity or other property much more closely than ordinary photography.
Visitors may be able to move through rooms, look in every direction, zoom toward distant objects, study the building layout, switch among different views, and return to the property repeatedly.
That is part of what makes an immersive tour valuable. It also means the finished experience deserves a deliberate review before it becomes publicly accessible.
The goal isn't to hide everything. It is to make sure that everything the public can see is there intentionally.
Matterport's current App End User License Agreement says users should take reasonable steps to minimize the unintended capture of personal data and have the necessary rights, permissions or consents when personal information is captured. Matterport also provides tools for blurring sensitive information and hiding individual scan positions. [1][2][3]
Key Checks vs. Key Decisions
There are really two different reviews to conduct before publication.
Key checks look for things that may have been captured unintentionally.
Key decisions ask whether information or spaces that were captured intentionally should actually be available to everyone online.
Key checks
Look carefully (ideally on a large screen w/ a fast connection) for:
Faces and identifiable people
License plates and identifying vehicle information
Wi-Fi passwords, keypad codes and other credentials
Computer monitors, tablets and televisions
Documents, schedules, labels and whiteboards
Employee names, badges and personal information
Mirrors and reflections
Keys, access cards and lockboxes
Security-monitoring screens
Sensitive equipment or operational information
Valuable inventory that was unintentionally exposed
Scan positions that put a visitor extremely close to something that had to be blurred
Links, PDFs, tags, videos or embedded content that should not be public
Information visible in Dollhouse, floor-plan or other alternate views that was missed during the normal walkthrough
Key decisions
Even when nothing was captured accidentally, decide:
Which rooms should be public at all?
Do we have appropriate authority and permission to showcase privately controlled spaces?
Should bathrooms be included in the principal tour?
Should bathroom imagery be left off Google Maps?
Should employee-only, mechanical, storage or back-of-house areas be excluded?
Does the tour reveal too much about security-camera locations or coverage?
Does it make the absence of security cameras unusually obvious?
Does it reveal valuable inventory, equipment, safes or access routes in more detail than is useful?
Should scan positions close to blurred material be hidden?
Should zoom, measurements, Dollhouse, floor-plan or other viewer functions be limited when the platform permits it?
Should the entire tour be fully public, or would an unlisted, restricted or separate internal version be more appropriate?
Should the Google Maps version contain fewer spaces than the organization's principal 3D tour?
Are there any upgrades I want beyond the initial scope?
Potential Upgrades w/ Adam
A standard Matterport or other 3D tour can be highly effective on its own. For larger, more complex or higher-profile projects, however, the native 3D tour may be only the starting point.
Museums, historic sites, campuses, parks, large community amenities, resorts, multi-building destinations and other significant properties can benefit substantially from enhancements that improve orientation, navigation, storytelling, interpretation and the overall professionalism of the visitor experience.
In some cases, these upgrades are not simply decorative additions. They can solve real limitations of the native platform.
The right question is not merely:
“Can this be added?”
It is:
“Would this materially improve how visitors understand, navigate or experience the property?”
When the answer is yes, an enhancement may be worthwhile even when it requires additional capture, editing, software, hosting or recurring subscription costs.
Unless specifically included in the original scope, additional enhancements should be discussed and approved before related work or expenses are incurred.
Below I'll go over:
Aerial 360° Panoramas
Third-Party Tour Platforms & Enhanced Interfaces
Video Integration
Additional Interactive Content
Multiple 3D Spaces May Benefit From a More Advanced Visitor Experience
The Appropriate Level of Enhancement Depends on the Project
Aerial 360° Panoramas
For large, outdoor or multi-building properties, aerial 360° imagery can provide context that ground-level scanning simply cannot.
It can be especially valuable for:
Museums and historic sites
Campuses
Parks and gardens
Large HOAs and community amenity complexes
Resorts
Neighborhoods
Event venues
Attractions spread across multiple buildings or a large property
An aerial 360° can help visitors understand where they are, how buildings and amenities relate to one another, and what surrounds the portion of the property they are currently exploring.
For a small single interior, that may add relatively little.
For a large destination, an aerial 360° can become one of the most useful orientation features in the entire experience.
Native Matterport integration can be limited at greater heights
Matterport supports 360° imagery, but higher drone panoramas may not integrate into the native Matterport experience in the same way as lower elevated imagery.
In my experience, imagery captured at approximately 30 feet above ground has been able to work within the Matterport workflow, while imagery around 60 feet has not integrated successfully in the same manner. I do not treat 30 feet as an official Matterport cutoff because Matterport does not appear to publish a fixed maximum altitude, and results can vary by project and workflow.
For higher aerial viewpoints—which can also provide substantially better context for a large property—a separate presentation method may therefore be necessary.
Options can include:
Hosting the aerial panorama on a service such as Momento360
Linking to it from the primary 3D experience
Integrating it through an enhanced third-party tour interface
Incorporating aerial panoramas into a broader multimedia visitor experience
Additional drone capture, stitching, editing, integration, hosting or subscription costs may apply.
Third-Party Tour Platforms & Enhanced Interfaces
For a straightforward single-building project, the native Matterport interface may provide everything needed.
For a more ambitious project, the interface and navigation can become almost as important as the underlying 3D capture.
Platforms such as MPEmbed, MPSkin, Treedis and similar services can potentially provide capabilities such as:
More prominent and intuitive menus
Custom branding
Enhanced navigation
Information panels
Additional visitor controls
More polished presentation
Additional multimedia options
Connections among multiple Matterport tours
A more unified experience across several buildings, floors or exhibit areas
This becomes especially important when a property is too large or complex to function best as a single Matterport model.
A museum, historic destination or campus may need several separate 3D models because of physical separation, project size, scan-count considerations or different phases of capture.
Simply giving visitors several separate links technically provides access to the material.
A strong third-party interface can instead make those separate models feel much more like one cohesive digital destination.
That can be a significant difference in visitor experience rather than merely a cosmetic upgrade.
Third-party platforms may involve:
Initial setup or customization costs
Additional integration work
Monthly or annual subscriptions
Continued hosting costs for as long as the enhanced version remains live
These costs are separate from the underlying Matterport or other native hosting.
Video Integration
A 3D tour is particularly good at answering:
“What does this place look like?”
“Where can I go?”
“How are these spaces connected?”
Video can answer a different set of questions:
“Why does this matter?”
“What happened here?”
“What should I notice?”
“What story does this exhibit or location tell?”
Video can therefore add substantial value to:
Museum exhibits
Historic interpretation
Curator explanations
Welcome messages
Interviews
Demonstrations
Archival footage
Before-and-after presentations
Promotional introductions
Educational content
For museums, historic sites and educational destinations especially, video can help transform a 3D model from primarily a visual record of a space into a more complete interpretive experience.
Video may be embedded, linked from interactive points, displayed through an enhanced third-party interface or provided alongside the tour.
Video hosting can also affect ongoing cost
Where the video is hosted can matter.
YouTube ordinarily allows standard videos to remain hosted without a recurring hosting charge from YouTube itself. It can therefore be a very cost-effective option when its player, branding and presentation are acceptable. While I have a few Youtube accounts, my first Youtube account that I still maintain & have videos published in was started in 2007.
Vimeo and similar professional video platforms can provide greater control over presentation, branding, privacy and embedding, but those capabilities may require a paid subscription. I've had a Vimeo account since 2011 & have published videos on it.
If video is maintained on a paid hosting account, an ongoing hosting charge may therefore apply for as long as the hosted video remains part of the experience.
There may also be additional charges for:
Video production
Editing
Captioning
Upload and setup
Integration into the 3D experience
Ongoing management or replacement of video content
A recurring charge associated with YouTube would generally be for management, updating or other ongoing services, rather than for basic YouTube hosting itself.
Additional Interactive Content
A higher-level 3D experience can also provide information that helps visitors understand what they are looking at rather than simply allowing them to walk through the space.
Depending on the platform and project, enhancements can include:
Informational tags
Exhibit descriptions
Historical photographs
Before-and-after imagery
Additional photography
Documents or PDFs
Floor plans
Menus
Product or service information
Audio
Video
External educational resources
Donation links
Ticketing or booking links
Calls to action
Guided-tour stops
Navigation between different spaces
For a small property, only a limited number of these may be useful.
For a museum, historic site or information-rich destination, interactive content can be one of the main things that turns a digital walkthrough into an actual educational or visitor experience.
Multiple 3D Spaces May Benefit From a More Advanced Visitor Experience
Large projects sometimes need to be divided among multiple 3D tours because of:
Property size
Physical distance between buildings
Scan-count considerations
Different floors or exhibit areas
Different capture dates or project phases
Without an enhanced interface, visitors may have to leave one tour, locate another link and open a separate experience.
A more advanced interface can potentially connect:
Separate buildings
Different floors
Indoor and outdoor areas
Multiple galleries
Different amenity areas
Several sections of a large attraction
For a major destination, creating that continuity can be an important part of making the finished product feel professional, intuitive and intentionally designed rather than like a collection of unrelated 3D scans.
The Appropriate Level of Enhancement Depends on the Project
Not every property needs every enhancement.
A straightforward small-business tour may be excellent using the native 3D platform alone.
A major museum, historic property, campus, park, resort or other destination may warrant a much more sophisticated combination of:
3D capture + aerial 360° imagery + enhanced navigation + video + interactive interpretation.
These additions can make the experience easier to navigate, more informative, more immersive and more useful long after the original capture.
If an enhancement was not included in the originally agreed scope, I will discuss the available options, expected benefits, important limitations and any additional one-time or recurring costs before proceeding.
A useful distinction is:
Checks ask, “Did we capture something we shouldn't have?”
Decisions ask, “Even if we captured it intentionally, do we really want everyone online to have access to it?”
A tour can pass every basic privacy check and still reveal more about a property's layout, security or operations than the organization ultimately wants to publish.
Prevent Problems Before the Camera Arrives
Removing sensitive information before capture is usually better than trying to fix everything afterward.
A 360° camera records in every direction, including details that the person operating it may not immediately notice. Existing virtual-tour privacy guidance similarly recommends beginning privacy planning before capture rather than treating blurring as the primary solution later. [8][9]
Before scanning begins, consider:
Removing sensitive paperwork
Erasing private information from whiteboards
Turning off or changing computer and television screens
Removing visible passwords and access codes
Moving unnecessary vehicles when practical
Securing valuable items that do not need to be featured
Closing doors to areas that will be excluded
Identifying spaces that should not be captured
Scheduling capture when customers, visitors or residents are less likely to be present
Advising employees that capture will occur
Checking mirrors, windows and other reflective surfaces
Identifying security-sensitive equipment or areas before capture begins
Identifying temporary signs, displays or promotions that should not appear indefinitely in an evergreen tour
For a particularly sensitive facility, it can be useful to create a simple room list before scanning:
Approved for public capture
Approved only under certain conditions
Private/internal documentation only
Do not capture
That approach can prevent much more work later.
Confirm Permission for Private Spaces Being Showcased
Permission to enter a space is not necessarily the same thing as permission to create and publish a detailed digital representation of it.
If the tour intentionally showcases a privately controlled space that the organization commissioning the tour does not unquestionably have authority to publish, I recommend obtaining written—and preferably signed—authorization from whoever has that authority.
Examples can include:
Tenant-controlled commercial suites
Privately owned residences
Rooms controlled by another organization
Individually controlled spaces within a shared property
Private clubs or restricted-access amenities
Privately controlled exhibits or collections
Areas subject to lease, licensing or contractual restrictions
Ideally, the authorization should make clear that the permitted media may include 3D scanning, 360° imagery, photography and/or video and that the resulting material may be displayed publicly online.
If publication to Google Maps is contemplated, including that in the authorization can remove another possible ambiguity.
Matterport's current EULA says users should minimize unintended capture of personal data and possess the necessary rights, permissions or consents when captured imagery contains personal information. [1]
Google separately says photos or videos from private locations should not be published without the owner's consent and says imagery should not be published from publicly inaccessible locations or no-photo zones. [4]
When authority is genuinely uncertain, the better approach is normally to leave the affected area out until permission has been resolved.
Look for Recognizable People—Including People Seen Indirectly
Don't limit the privacy review to obvious faces standing in front of the camera.
Look for people:
In the foreground or background
Through doors or windows
In mirrors
In glass or polished surfaces
On televisions or computer monitors
In exterior or aerial 360° imagery
Also check for:
Employee name badges
Name plates
Identification cards
Uniform numbers
Other information that could identify an individual
Matterport specifically gives examples including faces, license plates, a Wi-Fi password and private information on a computer monitor when discussing information its Blur Brush can conceal. [2]
Whenever practical, capturing the property when relatively few people are present is cleaner than relying entirely on post-production blurring.
Look for Recognizable People—Including People in Photographs
Don't limit the privacy review to people who were physically present during capture.
An identifiable person can also appear indirectly in:
Framed family or staff photographs
Employee-of-the-month displays
Staff directories
Bulletin boards
Posters containing recognizable individuals
Digital photo frames
Computer monitors or televisions
Mirrors, glass and other reflections
Exterior or aerial 360° imagery
A framed photograph that seems like part of the décor can be surprisingly clear in a high-resolution 3D or 360° tour.
Treat Google Maps and the primary 3D tour separately when appropriate
Google's current Maps privacy policy says contributors should not publish photos or videos in which people are identifiable without their permission. Google automatically applies face and license-plate blurring to certain submitted 360 video, but not to all other user-contributed imagery. For Photo Spheres and similar contributor-owned imagery, responsibility for appropriate blurring rests with the contributor. [4][5]
For a Google Maps-ready version, the conservative workflow is therefore to blur recognizable people—including recognizable faces appearing in framed photographs or displays—unless there is clear permission for that identifiable image to be published.
A separately hosted Matterport or other 3D tour may use a different approval standard. For example, the organization and tour provider may agree that identifiable people can remain visible when those individuals have provided appropriate written permission or a release.
That can mean a project needs different publication-ready versions:
Primary Matterport/3D tour: Certain identifiable people or photographs may remain visible when appropriate permission has been obtained and the organization intentionally wants them shown.
Google Maps version: Apply the privacy review required for the Google-published imagery, which may mean additional face blurring even when the main tour contains an approved unblurred image.
Creating separate versions can require additional editing, duplication or publication work, depending on the capture and hosting workflow. It is therefore helpful to decide before editing begins whether Google Maps publication is planned and whether the Google-ready imagery will require more extensive blurring.
Don't rely only on formal portraits
Also inspect:
Small photographs sitting on desks
Group photographs
Children's pictures
Staff photographs on office doors
Photos attached to name badges or credentials
Photographs reflected in mirrors
Images appearing incidentally on screens
If someone's identity does not add useful value to the tour and there is uncertainty about permission, blurring the image is generally the cleaner option.
Check License Plates and Other Identifying Vehicle Information
The parking lot can create privacy issues even when the interior is perfect.
Review vehicles visible:
Outside entrances
Through windows
In parking areas
Around loading areas
From exterior scan locations
In ground-level or aerial 360° imagery
Look beyond license plates. Parking permits, fleet numbers or other markings can sometimes identify a particular person or organization.
Google says it automatically blurs faces and license plates when creating Street View content from user-submitted 360 video, but it does not automatically apply that blurring to other user-submitted imagery. [4]
Do not assume a publishing platform will catch every issue for you.
Search for Wi-Fi Passwords, Codes and Access Credentials
Information intentionally made convenient for people inside the building may still be inappropriate for the open internet.
Check for:
Guest Wi-Fi passwords
Employee Wi-Fi credentials
Network information when sensitive
Passwords written on notes
Door keypad codes
Gate codes
Alarm codes
Lockbox combinations
Temporary access credentials
QR codes
Access-card information
Matterport itself has used a Wi-Fi password written on a whiteboard as an example of information that may need to be blurred. [2]
Inspect Screens, Paperwork, Whiteboards and Signs
Actively try to read things rather than assuming they're too small to matter.
A high-resolution capture may reveal considerably more when viewed closely than was apparent during capture.
Screens can expose:
Email
Customer or client names
Calendars
Appointment schedules
Financial information
Internal messaging
Point-of-sale information
Personnel information
Security-camera feeds
Internal websites
Proprietary software
Browser tabs or bookmarks
Printed material can expose:
Employee schedules
Customer paperwork
Sign-in sheets
Invoices
Mailing or shipping labels
Whiteboards
Personnel information
Vendor pricing
Internal phone lists
Medical or financial information
Emergency procedures
Access instructions
Matterport specifically cites private information on computer monitors as something that may warrant blurring. [2]
Someone familiar with the organization should participate in this review. A tour provider may have no reason to recognize why an otherwise ordinary-looking piece of paper is sensitive.
Consider Valuable Property and Whether the Tour Could Help Someone “Case” the Location
Privacy isn't the only concern. A virtual tour can also reveal useful physical-security information.
The National Association of REALTORS® specifically cautions that thieves can use virtual tours to remotely case a property and recommends keeping valuable items out of tour imagery when practical. Its examples include valuable artwork and computer equipment. [7]
Although that guidance addresses homes, the underlying principle can also apply to businesses, museums and other facilities.
Consider whether the tour unnecessarily documents:
High-value inventory
Expensive electronics
Artwork
Specialized machinery
Collectibles
Computer equipment
Controlled inventory
Safes
Cash-handling areas
Valuable storage rooms
Routes used to access valuable objects
This does not mean a jewelry store, museum, retailer or other organization should hide the very things visitors want to see.
The better question is:
Does the tour reveal operational or security detail beyond what legitimate visitors need or benefit from knowing?
Review Security Cameras—and the Apparent Lack of Them
A 3D tour can make an overall security pattern easier to study than an ordinary visit would.
Look for:
Camera locations
The apparent direction cameras face
Obvious coverage gaps
Areas with no visible cameras
Alarm panels
Access-control equipment
Keypads
Employee-only entrances
Key storage
Security-monitoring screens
Server or network equipment
Electrical or telecommunications areas
After-hours barriers
Restricted routes
A visible camera is not inherently a problem. Visible surveillance may itself serve as a deterrent.
The more useful question is:
Does the tour reveal substantially more about our security—or apparent lack of security—than we are comfortable letting someone remotely study?
What if there are very few cameras—or none?
A detailed tour may make weak apparent surveillance more obvious than an ordinary visit would.
Depending on the property, that could prompt consideration of:
Excluding unnecessary viewpoints
Changing which portions of the property are published
Improving actual security
Adding or repositioning real cameras where justified
Where lawful and appropriate, considering visible dummy camera housings or other decoys as part of a broader deterrence strategy
A dummy camera is not active surveillance and should not be treated as a substitute for actual security where actual security is warranted. Legal, insurance and operational considerations should also be considered before relying on decoys.
The point for purposes of the tour is simply to consider what the finished imagery communicates.
Check Keys, Badges and Other Physical-Security Information
Small details behind a counter can become surprisingly useful information when someone can inspect them closely.
Check for:
Key racks
Keys with readable labels
Access cards
Employee badges
Lockboxes
Alarm instructions
Building diagrams
Door codes
Emergency-access instructions
Security-system information
Vendor access instructions
A distant photograph of a key rack may communicate very little. A 3D scan position immediately beside it may reveal much more.
Bathrooms Can Be Included in the Main Tour—but Consider Leaving Them Off Google Maps
Restrooms can sometimes provide useful information, particularly when accessibility, quality or amenities matter.
A principal Matterport or other 3D tour might reasonably show:
An accessible restroom
Family or single-user facilities
Changing tables
A newly renovated restroom
A high-quality restroom at an event venue or clubhouse
Facilities associated with a pool or other amenity
Give bathrooms a heightened privacy review
Never capture an occupied restroom.
Also inspect:
Mirrors and reflections
Personal belongings
Medications or medical products
Employee belongings
Documents
Anything visible indirectly that should not be public
A multi-stall restroom generally does not need a scan inside every stall. Selected viewpoints can usually communicate what legitimate visitors need to know without documenting more than necessary.
Treat Google Maps separately
For projects that will also have imagery published to Google Maps, I recommend excluding restroom interiors from the Google Maps version, even when they remain available in the organization's primary Matterport or other 3D experience.
Google's current published privacy policy does not appear to contain a blanket rule stating that every restroom image is prohibited.
Google does, however, say not to publish imagery from publicly inaccessible locations or no-photo zones, requires owner consent for imagery from other private locations, prohibits certain private and confidential information, and emphasizes protecting people's privacy—particularly in sensitive locations. [4]
Google also specifically recommends blurring faces and license plates in 360° photos. [5]
Because restrooms carry unusually strong privacy expectations, my recommended practice is:
Principal Matterport/3D tour: Include selectively when useful, vacant, authorized and carefully reviewed.
Google Maps: Leave restroom interiors out.
This is a recommended publication practice, not a claim that Google currently has a blanket rule prohibiting all restroom imagery.
Hide Scans That Put Viewers Unnecessarily Close to Blurred Information (Especially Security Cameras)
Blurring something does not necessarily mean every nearby scan position should remain visible.
Matterport provides both blurring functionality and the ability to review and hide scan positions. [2][3]
After applying a blur, inspect the scan positions immediately surrounding it.
A blur that looks reasonable from a normal viewing distance can become:
Visually distracting at extremely close range
More noticeable than the original object might otherwise have been
An invitation for visitors to investigate what was hidden
Unnecessary to the actual visitor experience
If a nearby scan adds little value, consider hiding it and allowing visitors to view the blurred area from a more natural distance.
This can be especially useful around:
Computer screens
Documents
Password signs
Faces
License plates
Security equipment
Sensitive signage
Distance should not replace appropriate blurring. In some situations, the best result comes from using blurring and scan visibility together.
Decide Which Employee-Only and Back-of-House Areas Actually Need to Be Public
Capturing an area does not mean visitors need to be able to enter it virtually.
Consider whether the tour needs to include:
Private offices
Stockrooms
Employee break rooms
Kitchens or preparation areas
Maintenance rooms
Mechanical spaces
Loading areas
Server rooms
Cash-handling areas
Storage containing high-value inventory
Matterport specifically provides controls for reviewing, hiding and organizing scan positions to improve navigation and the visitor experience. [3]
Removing an unnecessary scan may simultaneously improve privacy, security and navigation.
Check Mirrors, Glass, Windows and Other Reflections
The camera can expose information indirectly even when the primary scene looks fine.
Inspect:
Mirrors
Glass doors
Exterior windows
Display cases
Polished metal
Glossy artwork
Dark television screens
Vehicle windows
A reflection can reveal a face, screen, private room or document that is not visible when looking in the obvious direction.
This deserves particular attention in bathrooms, salons, gyms, hotels, museums with display cases, and other spaces with numerous reflective surfaces.
Review Dollhouse, Floor-Plan, Measurement, Zoom and Other Viewer Capabilities
Test more than the normal walking experience.
Depending on the platform and configuration, visitors may be able to use:
Dollhouse or overhead views
Floor-plan views
Measurement tools
Zoom
Navigation menus
Guided routes
Downloads
Sharing functions
Other third-party viewer features
Alternate views can make it easier to understand:
Back entrances
Connections between public and restricted spaces
Employee corridors
Stairways
Storage locations
Building layout
Routes that are not obvious during a normal walkthrough
If a property is unusually security-sensitive, consider whether every available viewer function is appropriate.
However, limiting zoom or another viewer feature should not be the primary way sensitive information is protected.
If something should not be public, remove it before capture, blur it, hide the relevant scan, recapture the area or exclude that portion of the tour.
Also, test every available view rather than assuming something adequately obscured or harmless in normal walkthrough mode will look the same elsewhere.
Review Tags, Links, PDFs, Videos and Other Interactive Content
The imagery itself can be perfectly appropriate while an added interactive element creates a problem.
Review:
Mattertags or equivalent information points
Menu links
External links
Videos
Embedded PDFs
Downloadable documents
Contact information
Product links
Room labels
Captions
Guided-tour stops
Floor names
Make sure an embedded link does not accidentally point to an internal document.
Also consider whether labels such as Server Room, Security Office, Cash Office or similar names unnecessarily reveal a sensitive function.
Decide How Public the Tour Should Actually Be
Not every useful 3D tour needs to be available to everyone on the open internet.
Depending on the platform and project, possible approaches can include:
Fully public publication
A direct or unlisted link
Password-protected access
Client-, member- or employee-only access
Temporary publication
A limited public version
A more comprehensive private or internal version
LUM360 similarly recommends treating the level of publication and access as part of the privacy decision rather than automatically assuming every completed tour should be publicly indexed. [8]
There is also no reason every destination needs to receive exactly the same version.
For example:
Organization's website: A comprehensive customer- or visitor-facing tour.
Google Maps: A more selective group of public-facing areas.
Private/internal link: Additional documentation available only to authorized users.
Know Who Controls the Tour—and How It Can Be Changed or Removed
Before publication, know what happens if someone discovers a problem tomorrow.
A privacy review is less useful if nobody knows who actually controls the published asset.
Before approving publication, identify:
Who owns or controls the Matterport or other hosting account
Who controls any Google Maps imagery
Who retains the original files
Who can approve future edits
Who can hide or remove a tour
How quickly the public version can be taken down if necessary
What happens if the photographer or tour provider stops doing business
Whether account access or publishing control can be transferred when needed
A useful recent privacy-first virtual-tour framework for childcare facilities goes so far as to treat uncertain ownership or an untested removal path as a reason to hold publication. It also recommends establishing update and removal triggers before launch. [10]
Decide what should trigger another review
A tour that was appropriate when published may not remain appropriate forever.
Consider re-reviewing it after:
Remodeling
Changes in room use
A new tenant or operator
Changes in security equipment
New access-control systems
Significant changes to exhibits
Expiration or change of an exhibit loan
Changed permissions
New signage
A major change in inventory
A privacy or security incident
Knowing who can update or remove the tour should be part of the publication decision—not something discovered during a problem.
Special Considerations by Type of Property
The core privacy, security and approval checks above apply broadly, but some properties have additional risks because of what they contain, who uses them, or what rights govern the space.
A museum may need to consider loan agreements and reproduction rights. A healthcare office may need to pay particular attention to patient information. A school may warrant a much more conservative approach to identifiable people and access routes. A jewelry store may be especially concerned with high-value inventory and physical-security exposure.
These are additional considerations, not substitutes for the general review above.
For particularly sensitive properties, the room-by-room approach described earlier—public / conditional / internal only / do not capture—can be especially useful.
Museums, Historic Sites & Exhibits
Museums and historic sites can present unusually complex publication questions because the organization controlling the building may not own every object, image or publication right inside it.
Consider:
Loan agreements that restrict photography, scanning, reproduction or online display
Copyright or reproduction rights covering artwork, graphics, maps, films or other media
Whether the institution has authority to publish every featured object
Temporary exhibits that may need to disappear from the public tour after a certain date
High-value or irreplaceable objects
Locations and apparent coverage of cameras, alarms and sensors
Display-case security
Staff-only routes
Storage and collections areas
Exhibit labels containing information that should not be distributed more broadly
Areas where photography is prohibited despite visitor access
Donor restrictions
Tribal, cultural, religious or institutional restrictions involving particular objects or spaces
Whether a comprehensive archival/documentation version should remain private while a more limited version is public
Museums may also be captured at closer spacing or with more viewpoints than an ordinary commercial space to document exhibits thoroughly. That can make text, objects, security details and small background information substantially easier to inspect, so the final review should be correspondingly thorough.
For museum work in particular, distinguish among:
Permission to enter
Permission to document
Permission to reproduce
Permission to publish publicly
Those are not necessarily the same permission.
A museum may also want a highly detailed archival model of a temporary exhibit while publishing a more selective visitor-facing version.
Retail, Jewelry & High-Value Inventory
Businesses displaying valuable property should consider whether the tour reveals:
Safes
Stockrooms
Alarm equipment
Camera coverage
Concentrations of high-value inventory
Cash-handling areas
Employee-only access routes
Delivery and loading procedures
Storage practices
Cases or doors that provide access to particularly valuable goods
The objective is not to avoid showcasing products. It is to avoid publishing unnecessary information about how those products are secured, stored or accessed.
HOAs, Clubhouses & Community Amenities
Community facilities frequently combine visitor-facing spaces with resident-only access and privacy concerns.
Review:
Resident faces
Resident vehicles and license plates
Gate codes
Access cards or fobs
Pool-access systems
Fitness-center access systems
Locker rooms
Bathrooms
Private meeting rooms
Staff or maintenance spaces
Security-camera coverage
Whether entry systems reveal more than necessary
Whether particular areas should appear in the main tour but not on Google Maps
If residents or privately controlled units are intentionally showcased, obtain appropriate authorization rather than assuming association-level permission necessarily covers every private space.
Restaurants, Bars & Food-Service Businesses
Restaurants and other food-service businesses often combine highly public dining areas with much more sensitive operational spaces.
In addition to the general checks above, review:
Customers and staff: Faces, children, name badges and people visible through windows or mirrors
Reservation and wait-list systems: Customer names, phone numbers, reservation details and seating information
Point-of-sale screens: Transactions, employee information, customer information and login credentials
Receipts and paperwork: Customer names, payment information, invoices, schedules and vendor information
Wi-Fi information: Guest and employee network passwords
Kitchen and preparation areas: Decide whether back-of-house spaces actually need to be public
Recipes and proprietary processes: Whiteboards, prep sheets, recipe cards or procedures the business does not want broadly distributed
Storage areas: High-value inventory, locked storage, key locations and employee-only access
Cash handling: Registers, safes, cash offices and closing procedures
Security systems: Camera locations, apparent blind spots, alarm equipment and access controls
Employee schedules: Avoid publishing shift information or other staffing details unnecessarily
Delivery and loading areas: Consider whether entrances, storage routes or after-hours access should be visible
Bathrooms: Apply the heightened privacy review described elsewhere in this article, and consider leaving restroom imagery off Google Maps
Menus and pricing: Make sure prominently captured menus, specials or prices will not become misleading when they change
Temporary promotions and signage: Avoid making short-lived specials or dated promotions a prominent part of an otherwise long-lived tour
Decide how much of the kitchen should be shown
A clean, attractive kitchen can sometimes strengthen a restaurant's presentation, particularly when openness, craftsmanship or food preparation is part of the brand.
But a complete back-of-house tour may also reveal information that customers do not need, including storage practices, employee routes, security details and proprietary processes.
The question should not simply be “Can we show the kitchen?”
It should be:
“Which portions of the kitchen add useful transparency or marketing value without publishing unnecessary operational information?”
Consider how quickly restaurant information changes
Restaurants can change menus, prices, décor, seating layouts, staffing systems and operating procedures more frequently than many other properties.
Before publication, consider whether the tour contains information likely to become outdated quickly. A visually attractive menu board may look good on capture day but become inaccurate months later.
For long-lived tours, emphasizing the space and experience rather than temporary prices, promotions or schedules can reduce the need for future editing.
Healthcare, Counseling & Similar Facilities
These spaces warrant an especially conservative review because sensitive information can appear almost anywhere.
Look for:
Patient or client names
Appointment boards
Charts and paperwork
Medications
Computer screens
Treatment rooms
Reflections revealing private areas
Sign-in sheets
Whiteboards
Medical equipment associated with identifiable individuals
Any situation where merely establishing that a particular person was present could itself be sensitive
In many cases, excluding a room altogether may be preferable to relying heavily on blurring.
Schools, Childcare & Youth Facilities
Facilities serving children warrant heightened caution.
Review:
Children or identifiable staff
Names on cubbies
Children's artwork containing names or identifying information
Family photographs
Schedules
Sign-in sheets
Allergy or medical information
Security entrances
Door controls
Classroom layouts
Access routes
Changing or toileting spaces
Whether some rooms should be excluded entirely
Whether the tour should be fully public at all
A recent daycare-specific virtual-tour privacy framework recommends an empty facility, room-level allowlist, documented reviewer, publication control and a tested removal route before publication. [10]
For youth facilities, a formal approved / conditional / exclude room list can be particularly worthwhile.
Hotels, Gyms, Spas & Recreation Facilities
These properties often contain areas where privacy expectations vary dramatically from one room to the next.
Review:
Locker rooms
Showers
Bathrooms
Guest belongings
Staff-only corridors
Keys or access cards
Room-access information
Mirrors and reflections
Treatment rooms
Changing areas
Security-camera placement
Whether a room appropriate for the organization's own tour should nevertheless be excluded from Google Maps
Avoid assuming that because a room is technically accessible to customers, it is automatically appropriate for unlimited public 360° viewing.
Religious & Cultural Institutions
Religious and cultural properties can have concerns that are not primarily commercial.
Consider:
Private offices
Counseling rooms
Restricted or sacred spaces
Sensitive records
Security arrangements
Cultural or religious objects that should not be photographed or published
Areas subject to community-specific expectations
Event or staffing information that could create security concerns
Children's areas
Records or displays containing names
Whether separately controlled groups or organizations need to authorize their own spaces
When uncertainty exists, confirm publication expectations with the person or body that actually has authority over the space or object.
Test the Exact Experience the Public Will Receive
Final approval should happen in the actual public-facing viewer—not only inside the editing interface.
Test the experience on both a computer and a phone.
Approach it like someone who has never visited the property and deliberately try to discover things.
Check whether:
The tour begins in the correct place
Important spaces are easy to find
Restricted areas can accidentally be entered
Unnecessary scan positions remain visible
Blurred information can be approached too closely
Zoom reveals unexpected information
Dollhouse or floor-plan views reveal something unexpected
Measurement features expose information you did not intend to emphasize
Menus and links work
Embedded documents are the intended versions
Labels are appropriate
The Google Maps version contains only the intended areas
The experience loads and navigates appropriately
Nothing sensitive appears only from an unusual viewing angle
Existing privacy guidance similarly recommends reviewing the finished experience at full resolution and in every direction, with someone who understands the site's operational risks involved in approval. [8]
Review the Tour Like a Stranger, Not Like Someone Who Works There
People stop noticing things they see every day.
The Wi-Fi password may have been beside the register for years.
The employee schedule may always be on the same whiteboard.
Everyone working there may know which door leads to storage.
A stranger does not have that familiarity—but someone exploring online may have substantially more time to inspect the space.
That is why I recommend having both the tour creator and someone who understands the property's operations participate in final approval.
The tour creator is more likely to catch technical, navigation and presentation issues.
The owner, manager, curator, facilities representative, tenant or staff member is more likely to recognize that a seemingly harmless object, sign, route or piece of equipment is actually sensitive.
What If You Find Something?
Finding an issue does not usually mean the entire property has to be scanned again.
Depending on the issue and platform, possible solutions can include:
Blurring the item
Hiding a scan position
Hiding several scan positions near a blur
Removing a panorama
Changing navigation
Recapturing a limited area
Removing a tag, label or link
Restricting a viewer feature where possible
Keeping an area private
Creating separate public and private versions
Publishing fewer areas to Google Maps
Sometimes the correct answer is simply not publishing a particular viewpoint or room.
A good 3D tour does not need to show everything the camera was capable of seeing.
It should show what the organization has deliberately decided is useful and appropriate for the intended audience to see.
Final Approval: Go, Hold or Don't Publish Yet
Before making a Matterport or other 3D experience public, answer these eight questions:
1. Can we identify anyone who should not be identifiable?
2. Can we read anything that should not be publicly available?
3. Does the tour reveal valuable property or security information that could reasonably be misused?
4. Can visitors navigate somewhere that should not be part of the public experience?
5. Do we have clear authority—including written or signed permission where appropriate—to showcase every privately controlled space included?
6. Does closer inspection, a nearby scan, zooming, measurements, reflections or an alternate view reveal something we did not intend?
7. Does every part of this tour actually need to be available to everyone who can access the public link?
Are there any upgrades I'd like that weren't initially discussed?
Also confirm:
Who approved publication?
Who controls the live tour?
Who can update or remove it later?
If a significant privacy, permission, security or control question remains unresolved, hold publication until it is resolved.
Sources Cited
Primary Sources
[1] Matterport — App End User License Agreement, Section 8: PrivacyMatterport's current agreement, last updated August 5, 2026, says users must take reasonably necessary steps to minimize unintended capture of personal data and have the necessary rights, permissions or consents when personal information is captured.Matterport App End User License Agreement
[2] Matterport — “Boost Privacy with the New Blur Brush”Matterport specifically discusses faces, license plates, Wi-Fi passwords and private information on computer monitors as examples of privacy concerns in Matterport spaces.Matterport Blur Brush privacy guidance
[3] Matterport Academy — “Manage & Edit Scan Points”Matterport describes reviewing, hiding and organizing individual scan positions to improve navigation and the visitor experience.Matterport scan-management guidance
[4] Google Maps — User Generated Content Policy: PrivacyGoogle addresses identifiable people, faces, license plates, confidential information, private locations, publicly inaccessible locations, consent and automatic blurring for submitted 360 video.Google Maps privacy policy for user-contributed imagery
[5] Google Maps — “Tips for Posting Media to Maps”Google recommends blurring faces and license plates in 360° photos and provides additional guidance for contributed 360 imagery.Google Maps media-posting guidance
[6] Google Maps — “How Your Content Is Used”Google explains how contributed content can be used and displayed within Google services and through products using Google content.Google Maps: How Your Content Is Used
[7] National Association of REALTORS® — Putting REALTOR® Safety First: Safety Strategies for the Modern REALTOR®NAR's section on photography and virtual tours warns that virtual tours can be used to remotely case a property and recommends keeping valuable items out of captured imagery when possible.NAR safety manual
Secondary & Practical Sources
[8] LUM360 — “Visual Privacy in Virtual Tours: What to Review Before Publishing”A useful industry checklist covering pre-capture planning, documents, screens, restricted areas, security details, full-resolution review, client approval and publication/access decisions.LUM360 virtual-tour privacy checklist
[9] Mythos Media — “360° Virtual Tours: Checklist”A practical pre-capture checklist recommending measures including turning off monitors, removing unwanted signs and personal items, moving vehicles and identifying security-sensitive areas before recording.Mythos Media on-site preparation checklist
[10] theStacc — “Daycare Google Business Profile Virtual Tours: A Privacy-First Publishing Checklist”A specialized 2026 framework particularly useful for its room-level allowlist/denylist concept, documented go/hold/no-go decision, publication-control requirements, tested removal route and re-review triggers.theStacc privacy-first virtual-tour checklist
Platform features and policies can change. Current requirements should be checked when a project involves unusual privacy, security, contractual or legal concerns.
This article provides general practical information and is not legal or security advice.
This article was prepared with assistance from AI and reviewed and edited by Adam Garrett. Learn more about how I use AI in real estate: How I Use AI in Real Estate
Comments