Metadata and privacy: what EXIF and GPS reveal in your photos
Your photos say more than you think
Every time you take a photo, the device stores an invisible layer of information inside the file: metadata. It is not part of the image you see, but it travels with it. And when you publish or send that photo, you are also sharing that data, often without noticing.
The best-known block is EXIF (Exchangeable Image File Format), which cameras and phones embed automatically. It is not the only one: there is also IPTC (editorial data, authorship, credits) and XMP (a flexible format editors use to store adjustments and, sometimes, provenance marks).
What EXIF can reveal
Depending on the device and the settings, EXIF can contain:
- GPS coordinates: the exact place where the photo was taken, down to meters.
- The exact date and time of capture.
- The make and model of the camera or phone.
- The equipment serial number in some cases.
- Technical settings: ISO, aperture, shutter speed, flash use.
From a privacy point of view, GPS is the most sensitive item. A single published photo can reveal where you live, where you work, your children’s school or your daily routine. You do not need to be an expert to extract that location: anyone who downloads the original file can do it.
Why trusting the platform is not enough
Many social networks strip part of the EXIF when you upload a photo, but behavior varies between platforms and does not always cover every field. There are also situations where the original file does circulate intact:
- When you send the photo by email or messaging as the original attachment.
- When you share it on cloud storage or upload it to your website.
- When you deliver it to a client or publish it on a marketplace.
In all of those cases, the metadata goes inside. The safe way to control it is to review it yourself before you share.
Check before you publish
The first step is knowing what your file carries. With the checker you can see whether your image contains EXIF, IPTC and XMP, plus C2PA/JUMBF provenance credentials and, for PNGs, text chunks.
Knowing what is inside lets you decide on purpose: maybe you want to keep IPTC authorship but remove the GPS, or clean everything before a public post.
How to clean metadata without ruining the photo
When you decide to remove metadata, the method matters. Our tool strips EXIF, IPTC and XMP (with the /exif mode for camera data and /xmp for the XMP block), and it does so without recompressing or altering the pixels.
That means:
- The image keeps exactly the same quality; there is no second compression that degrades the JPEG.
- The visual content stays bit-for-bit identical, which you can verify by comparing the pixel hash before and after.
- No watermark and no new data is added.
We accept the usual formats: JPEG, PNG, WebP, AVIF, TIFF and HEIC. And, for transparency: the file is processed on the server, not in your browser. It is uploaded, cleaned and deleted after 5 minutes. It is not logged, shared or used to train models.
Metadata, provenance and the AI label
Cleaning metadata has a double benefit. On one side it protects your privacy (goodbye GPS and device data). On the other it removes provenance marks that can trigger the AI label on real photos edited with modern software.
To be clear about the limit: removing metadata does not remove invisible pixel-level watermarks, such as Google’s SynthID, because those do not live in the metadata but in the image itself. And platforms can detect content by means other than metadata.
In short
Your photos carry EXIF, IPTC and XMP with information that can include your GPS location, the date and your camera model. Before you publish, check what the file contains with the checker and clean what you do not want to expose, without losing image quality. To understand each kind of metadata, see the glossary.