Privacy and publishing · Reference
Photo metadata privacy: what to inspect before sharing
Removing GPS reduces one source of location disclosure. A fuller privacy review also checks timestamps, device identifiers, author fields, previews, sidecars, and the visible photograph. An empty EXIF panel alone does not establish that the shared file is free of sensitive information.
By ExifGrabber · Sources reviewed · Editorial standards
What to check
Use this as a review checklist for a copy intended for publication. Decide which details are necessary for the audience before removing or retaining them.
| Area | Potential disclosure | Review action |
|---|---|---|
| GPS | Capture location | Inspect coordinates and location descriptions |
| Dates | Capture time or a routine | Check EXIF and XMP dates |
| Identity | Author, owner, device serial | Review descriptive and camera fields |
| Embedded images | A separate preview or thumbnail | Check for content absent from the main image |
| Delivery package | Sidecars, filenames, captions | Review everything delivered with the image |
| Visible pixels | Addresses, faces, reflections | Inspect the rendered image at useful magnification |
Inspect more than the EXIF tab
Start with a grouped dump. ExifGrabber’s browser viewer is useful for supported EXIF fields, but its current parsing configuration disables XMP and IPTC. Use a broader local inspection for a publication audit.
exiftool -G1 -a -s photo.jpgPublish a reviewed copy
Keep the original in an appropriate private location. Create a separate distribution copy, remove the fields you have decided to exclude, and inspect that exact output again. Reopen it visually to check orientation, color, and image quality.
For a JPEG test copy, the command below requests removal of metadata supported by ExifTool. It leaves a backup of the input by default. Keep that backup out of the distribution package. This command is not a universal sanitizer for RAW, video, or every container.
exiftool -all= publish-copy.jpg
exiftool -G1 -a -s publish-copy.jpgVerify the delivery path
Inspect the file actually received through the intended sharing method. A preview, a download, and an original attachment can be different files. Keep before-and-after outputs and record the path used.
Removing fields does not erase previous uploads or remove information visible in pixels. Preserve attribution and provenance where appropriate for the publication, and make an explicit decision about what a public copy should carry.
Related references and tools
To cite this reference, link to this page or a section heading and include the source-review date. Examples are illustrative; they are not measurements from a camera or a live platform test. Send a correction with the affected section and supporting evidence.