uploaded file can toggle privacy