---
title: "Living-Person Privacy"
description: "Every public page applies a living-person rule that **fails closed**: when the plugin cannot be sure a record is safe to show, it does not show it. ## What is never shown - Records marked **Private**. - Records whose event…"
url: "https://www.ancestorpress.com/docs/ops-living-person-privacy/"
updated: "2026-09-11"
category: "AncestorPress One-Place Studies"
---

# Living-Person Privacy

Every public page applies a living-person rule that **fails closed**: when the plugin cannot be sure a record is safe to show, it does not show it.

## What is never shown

- Records marked **Private**.
- Records whose event date - or, if there is none, record date - falls inside the cutoff window. The cutoff defaults to 100 years and is set on the Study screen.
- Records linked to a person who is flagged as living in the shared data core, whatever the record's date - a living centenarian's census entry stays hidden.
- Records linked to a person who cannot be found.
- Records with no readable date and no person link.

## Applied in the query, not just on display

The rule is applied inside the database query that every public view uses, so the occurrence count, the pagination, the record-type counts, the surname index, the study page's record inventory and the household inventory all count exactly the records a visitor can open. A suppressed person cannot appear as the head of a household or as a surname in the index.

## Administrators see everything

The admin screens show every record. Only the public pages are filtered.