Screener security

What to do if a screener leaked.
Contain it, find the copies, file the notices, then check access.

Lock the link first: change the password or set the film to Private, and switch the original download off. Then record every copy you can find, send a copyright removal request to each site hosting one, and only then work out who had access. That order limits new copies before you spend time on old ones.

See the plans

Video hosting for filmmakers · 5 GB free · Paid plans from USD 9/month

By uncompressed.io · Updated September 2026

The order matters

Stop new copies first,
then the old copies.

A leak has two parts: the link that is still open, and the copies already made. Close the link in minutes, because every hour it stays open can add another copy. Removing copies takes days and one request per site, so start it second. The question of who leaked it comes last, because the answer does not change the first three steps.

1

Contain

Change the password or set the film to Private. Switch the original download off. If the film must not play in any browser at all, turn on the vault.

2

Find the copies

Search for the title, the stills and the logline. For every copy, write down the exact URL, the site, the date and a screenshot. Each notice needs these details.

3

File the notices

Send one removal request to each service hosting a copy, through that service's own form or address, with the details it asks for.

4

Review who had access

List everyone who got the link and the password, check the film's analytics and your review shares, and reissue access only to the people who still need it.

Not legal advice

This page describes the removal procedures that YouTube, Google, Vimeo, the US Copyright Office and the Government of Canada publish. It is not legal advice. If a distribution deal, an embargo or a festival slot is at stake, talk to a lawyer who handles copyright before you send notices or accuse anyone.

Step one

Close the link
without changing the address.

Each of these moves is a setting on the film. None of them needs a new upload or a new link, and all of them apply to the next page load.

Change the password

Every earlier unlock stops working on the next page load, because the viewer's saved pass is tied to the old code. Give the new code only to the people who keep access. Use this when the audience should shrink, not disappear.

Set the film to Private

The watch page returns not found to everyone except you. Use this when nobody should be watching until you know more. You can switch it back later.

Switch the original download off

The Download original button disappears from the watch page. This stops new downloads of your file. It does not stop anyone from recording what the browser plays.

Turn on the vault

All web playback of that film stops: no watch-page player, no embed, no download. Vaulted films are reviewed in the compatible macOS app instead. The vault switch is on every plan, the free Starter included.

If the film was Unlisted, Public or Embed only, it could also be playing inside someone else’s page. Embed only does not limit which sites can embed a film. Password, Private and vaulted films do not play in an embed at all; the frame shows that the video is unavailable. So switching to Password or Private closes those embeds as well.

Two limits apply. A player that was already open keeps its playback link until that link expires, which can take up to two hours on the watch page and twelve hours in an embed. A copy that someone already downloaded or recorded cannot be pulled back by any setting. And renaming the film’s link does not revoke anything: the old address stops working, but the permanent short link and the embed link still reach the film.

Step two

Build the list
before you ask for anything.

Search video sites and web search for the title, alternative titles, the director’s name and a line of dialogue. Leaked copies are often renamed, so run a reverse image search on a few distinctive frames as well. For every copy, record the exact URL of the page that plays it (not the site’s home page), the date and time you saw it, and a screenshot. Every procedure in step three asks you to identify the specific location of the copy, so this list is what you will actually be filing from.

Then check your own film. If it was Unlisted, Public or Embed only, open its analytics: the top sources list the sites hosting its embed, or Direct link. An unfamiliar site in that list is embedding your film and streaming it from your file; switching the film to Password or Private stops that. The viewer timelines show where each viewer paused, rewound and stopped, labelled by city and device family.

Keep your original master untouched. You will need it to describe the work, and you may need it to show that a leaked copy is your film.

Step three

One notice per host,
each through its own channel.

In the United States, section 512 of the copyright law gives online service providers protection from liability, called safe harbors. The Copyright Office says three of the four kinds of provider it covers must follow the notice-and-takedown system to qualify. That is why the major platforms publish a removal procedure, and why their forms ask for the same things.

The Copyright Office lists what a notice must substantially contain: a signature of the copyright owner or an authorized agent, identification of the work, identification of the infringing material with enough information to locate it, your contact information, a statement of good-faith belief, and a statement, made under penalty of perjury, that the information is accurate. It also publishes a sample notice, which we link to but have not summarized here.

For a site that has no removal form, the Copyright Office runs a central, public directory of the agents that service providers designate to receive these notices. You can search the directory by provider name.

YouTube
Google Search and other Google products
Vimeo
Whereto file
YouTube Studio: Content detection,then New removal request;or email, fax or post toCopyright Operations
The legal troubleshooter,which Google calls theeasiest way to file
The online claim form;or email dmca@vimeo.com;or post to its Copyright Agent
Whocan file
The copyright owner, or anauthorized representativesuch as a lawyer
Not covered in thepoints cited here
Not covered in thepoints cited here
What toinclude
Contact details, a descriptionof the work, the direct URLs,two legal statements and yourfull legal name as signature
Contact details, a descriptionof the work, the specific URLs,the good-faith and accuracystatements, and a signature(a typed full legal name works)
Name, address, phone and email,a description of the work, whereit is on Vimeo (such as the URL),the good-faith and perjurystatements, and a signature
Worthknowing
YouTube warns that misusingits process can lead to thefiler's account being terminated
Google says it cannot act ona request missing this information,and that its policy is to complywith copyright notices
The claim form is atvimeo.com/dmca/claim

Paraphrased from each service's own page, fetched 17 September 2026 and listed in the sources below. Forms and addresses change; open the page itself before you file.

YouTube’s postal address, as its help page gives it, is Copyright Operations, YouTube (Google LLC), 901 Cherry Ave., San Bruno, CA 94066. If a copy sits on a site Google does not run and also shows up in Google results, send one request to Google and a separate one to that site.

In Canada, the system is different. The Government of Canada describes a notice-and-notice regime: an internet provider that receives a notice of claimed infringement forwards it to its subscriber, for example by email, and tells the copyright owner that it has done so. The page describes forwarding, not removal. It lists what a notice includes: the claimant’s name and address, the work, its web or internet address, the claimed infringement, and the date and time. Since 13 December 2018, a notice must not include an offer to settle or a demand for payment or personal information. The page also says a provider must release a subscriber’s information if a court orders it. That page is written for people who receive notices, not for rights holders who send them, which is one more reason to get advice before relying on it.

Step four

Review access as a list,
not a verdict.

Once the link is closed and the notices are out, work out who could have made the copy. Be careful: what you have is a list of people who had access, not proof of who leaked it.

Who got the link and the code

Your sent mail and messages are the real record. A password is one shared code per film, and anyone who had it could pass it on with the link. Write down everyone who received it and when.

What the analytics show

Per-film viewer timelines are labelled by city and device family, never by name or email. Unique visitors are a pseudonymous daily count. They can show when viewing happened and roughly where, not who.

What the email gate records

A film's gate can ask for one email address instead of a password. It sends no confirmation, so anyone who types that address gets in. When a viewer passes it, their notes and approvals are attributed to that address, which records who commented, not who watched.

What the review room records

Notes in the review room carry the reviewer's name from the share you created, and removing a client's share stops that reviewer's link. Remove the shares that are no longer needed.

Browser links carry no watermark. uncompressed.io adds no visible or forensic mark to a film on its watch page, in an embed or on a review link. If the leaked copy came from a browser link, nothing in its pixels points to a viewer, and this page will not suggest otherwise.

Vaulted films are different, because they never play in a browser. Vault includes encrypted local playback, supported capture restrictions, visible session identification and invisible per-person forensic marks in the macOS app. These are distinct controls; forensic detection depends on the recovered copy. These controls reduce risk; they cannot guarantee that footage never leaks or that every leak can be traced. If the copy you found came from a vaulted film, keep the best-quality version you can get: cropping, recompression and filming a screen all weaken recovery. Even when a mark is recovered, it can at most point to an issued copy. It does not, on its own, prove who redistributed it.

When you reissue access, give a new password only to the people who still need it, and leave the original download off unless someone needs the file itself.

Before the next send

Match the link
to what it would cost to lose.

For many screeners a password link with the download switched off is a reasonable level: a forwarded URL is not watchable without the code, though the code can be forwarded too. Where the viewer only needs to watch, never switch the download on. Where a leak would cost a sale or a premiere, use the vault. That means the viewer needs a compatible Mac and the app, which is a real cost, and some recipients will not accept it.

If what you need is a per-viewer forensic mark on a link that plays in any browser, uncompressed.io does not offer that, and you should use a service that documents it for browser playback. Anything a browser can play can be recorded, whichever service sends it.

Questions

Frequently asked

Can a copy that leaked from a browser link be traced to one viewer?

Not by uncompressed.io. Web links, embeds and the watch page carry no visible or forensic watermark: the player draws only your logo, the title and captions. What remains is circumstantial: who you sent the link and password to, the per-film viewer timelines (labelled by city and device family, never by name) and the sites listed as embed sources. None of that proves who made a copy.

Should I delete the film to stop the leak?

Setting the film to Private stops the watch page just as well, and it can be undone. Deleting removes the file, the poster and the record, and it does not reach copies that already exist elsewhere. Keep your original until the notices are settled, since each notice has to identify the work.

Does one takedown notice remove the copy everywhere?

No. Each notice goes to the service hosting that copy, and each service has its own channel: YouTube, Google and Vimeo each publish one. A copy taken off one site can remain on another, so every host needs its own notice. In Canada, the notice-and-notice regime is built around the internet provider forwarding your notice to its subscriber.

Who is allowed to send the notice?

YouTube says removal requests should come from the copyright owner or from someone authorized to act for them, such as a lawyer. The US Copyright Office lists the signature of the owner or an authorized agent as one of the elements of a notice. If you are the director but a producer or distributor holds the rights, agree on who files before anyone sends anything.

Lock the link from the film itself

Visibility, the password and the vault switch are set on each film, and all of them are on every plan, the free Starter included. A change applies to the next page load, and the link you sent stays the same.

Sources

  1. 1.US Copyright Office: Section 512 of Title 17 (safe harbors and notice elements) (fetched 17 September 2026)
  2. 2.US Copyright Office: DMCA Designated Agent Directory (fetched 17 September 2026)
  3. 3.YouTube Help: Submit a copyright removal request (fetched 17 September 2026)
  4. 4.Google Legal Help: Removing content from Google for copyright reasons (fetched 17 September 2026)
  5. 5.Google Legal Help: Google's copyright notice policy (fetched 17 September 2026)
  6. 6.Vimeo: DMCA policy (fetched 17 September 2026)
  7. 7.Government of Canada, Office of Consumer Affairs: Notices to Canadian internet subscribers (fetched 17 September 2026; written for subscribers who receive notices, not as a filing guide)