What Your Photos Reveal: EXIF Metadata and Photo Privacy

Every photo you share carries more than the picture. Behind the image you see, the file itself can hold a quiet second record: when the photo was taken, on what device, with what settings — and, when location tagging was switched on, exactly where you were standing. You never see that record by looking at the photo, but anyone who receives the original file can read it in seconds with an ordinary viewer.

That hidden record is called EXIF data. This guide explains what it contains, what survives sharing, and ends with a check you can run on your own photos before you send them anywhere.

The short answer

EXIF stands for Exchangeable Image File Format. It is a standard for storing metadata — data about data — inside an image file, principally JPEG and TIFF photos. When you press the shutter, your camera or phone writes a block of this metadata into the file alongside the image itself. It is invisible in the picture, and it travels with the file until something strips it out.

One sentence to carry through this guide: the picture is not the whole file. Whenever you hand someone the original file, you hand them the picture plus whatever record the camera wrote into it.

What EXIF data actually contains

Not every photo carries the same fields — what is written depends on the camera, its settings, and whether location services were on. A full EXIF record can include:

• Date and time — when the shutter was pressed, often to the second.
• Camera make and model — the phone or camera that took the shot, sometimes with a serial number.
• Exposure settings — aperture, shutter speed, ISO, and focal length: the technical recipe for the shot.
• Orientation — which way the camera was held, so the photo displays upright.
• Software — the app that processed the file.
• GPS coordinates — latitude and longitude, and sometimes altitude, but only when location tagging was enabled at the moment of capture.
• Flash and white balance — whether flash fired and how colour was balanced.

Two points matter more than the full list. First, the GPS field is the sensitive one: a date or a camera model is mildly interesting on its own, but coordinates can point at a home, a workplace, or a school. Second, an absent field is not a fault. A screenshot has no camera and no coordinates to record, and an edited or exported copy may have had its camera fields stripped when it was saved.

Why it matters: the privacy side

EXIF data becomes a privacy question the moment a photo leaves your phone, because the fields combine. A single photo with GPS tells someone where you were once. A series of photos over weeks, each with a timestamp and a location, can sketch a routine: where you spend mornings, when the house is empty, which places you return to. A camera model and serial number can link photos across accounts to the same device.

The highest-risk cases are ordinary ones:

• A marketplace listing. You photograph an item at home and upload the original file. If that file still carries GPS, every buyer — and everyone else who downloads the image — can see where it was taken.
• A photo of children. A picture from a school event or a garden carries the same location field as any other photo, and it identifies a place connected to a child.
• A direct send to someone you barely know. A photo sent as an original file to a new contact or a buyer arrives with its record intact, unlike a post on a major platform.
• A work or private-location photo. A picture taken inside a private home, office, or event venue can reveal a location the people in it never agreed to share.

None of this means every photo is dangerous. It means the check should happen before sharing, not after — once the original file is in someone else’s hands, you cannot take its metadata back.

What survives sharing — and what does not

This is where most confusion lives, because the answer depends on the route the photo takes, not on the photo itself.

Social media posts: usually stripped for other viewers. Major platforms such as Facebook and Instagram generally remove EXIF from the copy that other people see and download. But the platform itself may keep the metadata internally, and the original file on your phone is untouched. Posting a stripped copy does not clean the original.

Email attachments and direct file sends: usually preserved. Email does not process images, so an attachment arrives as the original file, metadata included. The same applies when you send a photo as a document or file in a messaging app, or hand someone the file on a drive or a link to the original. This is the riskiest route, and it is also the one people choose when they want to preserve quality. The FBI’s guide to EXIF dangers makes the same point plainly: remove the data before sharing images with people or posting them online, especially when they were captured in private homes or businesses (see the FBI’s EXIF guide).

Screenshots: no camera EXIF. A screenshot is a picture of your screen, not a camera capture, so it carries no camera data and no coordinates — a quick, crude way to share an image without its record, at the cost of quality.

Edited and re-saved copies: often partial. Editors, messaging apps, and export tools frequently strip some or all metadata when they save a new copy. That is why the same photo can show camera data in one copy and nothing in another. “It looked clean in the app” is not proof the original is clean.

What EXIF is not

A few misunderstandings cause most of the mistakes:

• EXIF is not visible in the picture. Cropping a photo changes the image, not necessarily the metadata. A cropped photo can still carry the original capture date and location.
• EXIF is not the same as what one viewer shows. Different viewers read different amounts. A basic viewer may show only camera, date, and orientation, while a full EXIF reader shows exposure settings, software, and GPS. An empty result in a basic viewer means those basic fields are absent — it does not prove the full record is empty.
• EXIF is not proof on its own. Metadata can be edited, so a timestamp or location in a file is only as trustworthy as the file. It is useful for organising photos and checking what you are about to share; it is not, by itself, conclusive evidence about anything else.
• Turning location off does not fix old photos. Switching off location tagging changes future photos only. Photos already taken keep whatever was attached at the time, and need to be handled separately before sharing.

How to check a photo before you share it

Checking is a two-step job: a quick basic check tells you what the file plainly carries, and a full-record check tells you the rest.

Start with the basics. Open the free Image Metadata Inspector, choose the image file (up to 10 MB), and click Run. It reports dimensions, size, and format, plus any basic JPEG camera fields found — camera, date, and orientation, where present. The file is parsed inside your browser and never sent to a server.

Read its limits as carefully as its results, because they are stated plainly on its own page: it reads basic fields only. It does not show GPS location, detailed exposure settings, or editing history, and it does not read the full EXIF record. An empty camera result is normal for edited, exported, or screenshot images. So a basic check that shows nothing does not clear a photo for sensitive sharing — it only tells you the basic fields are absent.

For the full record, use a full EXIF reader or your phone’s info panel: on an iPhone, swipe up or tap the info button to see camera details and, when location was on, a map point; on Android, open the photo’s details view; on a computer, a file’s properties view shows the camera and GPS groups for JPEG and TIFF files. If the photo is sensitive, check the full record before you send the original file. Proton’s EXIF privacy guide gives the same advice: know what is embedded before you share it.

For a related image-file habit, see How to Reduce an Image’s File Size: re-saving a photo is one route by which metadata gets stripped, but it is not a substitute for checking the file you actually send.

Before you share: a short privacy checklist

Work through this in order, before the photo leaves your device:

1. Check the file you are actually sending — the original, not a platform copy — with a basic check first and a full-record view when the photo is sensitive.
2. Decide what matters. A landscape with no GPS and no people is a different case from a home photo with coordinates. Spend the care where the fields are sensitive.
3. Turn location off for future shots if you do not need it. On an iPhone: Settings, Privacy and Security, Location Services, Camera, Never; on Android: the camera app’s location tag setting, off. This changes future photos, not past ones.
4. Choose the route deliberately. If the recipient only needs to see the picture, a platform post or a screenshot avoids sending the original record. If they need the original file, check and, where needed, strip the metadata first — and verify afterwards that the strip worked.
5. Treat marketplace and direct-send photos as the highest-risk case. Those are the routes where the original file, GPS included, most often reaches strangers.

The Image Tools category holds the rest of the checking tools, and you can browse all free tools if the job needs a different tool.

Frequently asked questions

Does every photo have EXIF data?

No. Original photos from a camera or phone usually do. Screenshots, graphics, and many edited or exported copies carry little or none. The only way to know for a given file is to check that file.

Does posting to social media remove EXIF data?

For other viewers, generally yes on the major platforms: the copy they see and download has its EXIF stripped. But the platform may keep it internally, and your original file is unchanged. Do not treat a platform post as proof the original is clean.

Does cropping a photo remove its EXIF data?

Not necessarily. Cropping changes the pixels; whether the metadata survives depends on the app that saves the new copy. Some editors strip it, some keep it. Check the saved file, not the editing step.

Does the Image Metadata Inspector show a photo’s GPS location?

No. It reads basic JPEG fields only — camera, date, and orientation — plus dimensions, size, and format. GPS is part of the full EXIF record, which it does not read. For GPS, use a full EXIF reader or your phone’s info panel.

Can I remove EXIF data completely?

You can strip the metadata block from a file with a dedicated removal tool, and verify afterwards that the strip worked. But a stripped file can still identify people or places through what is visible in the picture itself.

Check the file, then share the picture

EXIF data is not a flaw in your camera. It is a useful record that becomes a privacy question only when the original file travels further than you intended. The habit that fixes most of it is small: check the file you are actually sending, know the limits of a basic check, and choose the sharing route with the record in mind.

Run the check on your next photo before you send it: open the Image Metadata Inspector, read what the file carries, and fix the first sensitive field you find — before someone else reads it for you.