Facebook is a privacy nightmare. Here’s one problem I found regarding the creation of photo albums, which is largely due to their use of language:
When creating a photo album (after uploading photos) and editing it (when editing the photos in an album via “Edit album info”), you’re asked whether you want to Publish the album or not. Publishing here means to announce the album on your friends feeds. It has nothing to do with whether the album is visible to others or not.
As soon as photos are uploaded to an album they are visible to others according to the albums privacy settings.