📋 Contents
What Is EXIF Data and Where Does It Come From?
EXIF (Exchangeable Image File Format) is a standard that embeds metadata directly into image files. Every time you press the shutter on your phone or camera, the device writes dozens of data fields into the JPEG, HEIC, or RAW file — before you ever see the photo.
This isn't a bug. EXIF was designed to help photographers: record exposure settings, timestamp shoots, geotag locations for organizing photo libraries. The problem is that this data travels with the photo when you share it — email it, upload it to a forum, post it on a listing site. The recipient downloads the image and gets all that metadata for free.
What's Actually In Your Photos — The Full List
Modern smartphones embed far more than just camera settings. Here's everything a typical phone photo contains:
| Category | Fields | Privacy Risk |
|---|---|---|
| GPS Location | Latitude, longitude, altitude (to 3 decimal places = ~110m accuracy) | Critical. Reveals exact shooting location. Your home, workplace, kid's school. |
| Device Info | Phone model, manufacturer, OS version, camera sensor | Medium. Identifies device fleet for targeted attacks. |
| Timestamp | Date and time the photo was taken, including timezone offset | Medium. Confirms when you were at a location. |
| Camera Settings | Aperture, shutter speed, ISO, focal length, flash status | Low. Mostly harmless, but can fingerprint a specific camera. |
| Serial Numbers | Camera body serial number, lens serial number | High. Uniquely identifies your device. Can be cross-referenced across photos. |
| Software | Editing software and version used (Photoshop, Lightroom) | Low. Can reveal editing history. |
| Thumbnail | Embedded JPEG preview of the full image | Medium. Survives cropping/redaction of the main image. Famously used to recover "cropped out" content. |
| Copyright/Authorship | Photographer name, copyright notice, image description | Medium. Some cameras let you set an owner name — and you might have set it to your full name years ago and forgotten. | Face Tags | Windows Live Photo Gallery, Picasa: people tag metadata with names | Critical. Names of people in your photos, stored in the file. |
Real-World Cases Where EXIF Data Caused Harm
- FBI arrests hacker via EXIF GPS (2012) — Higinio Ochoa posted a photo of his girlfriend. FBI extracted GPS coordinates, located the apartment complex, arrested him. Sentenced to 25 years.
- Cartel members identified via photo metadata (2015) — Belgian journalist surfaced EXIF data from cartel social media posts. GPS coordinates matched safe houses.
- Craigslist criminals tracked (2013) — Police extracted EXIF GPS from iPhone photos posted in stolen goods listings. Led directly to sellers' homes.
- Whistleblower deanonymization risk (ongoing) — Multiple cases where EXIF serial numbers from "anonymous" leaked documents traced back to a specific camera owned by a specific person.
- Celebrity locations leaked (ongoing) — Paparazzi routinely use EXIF GPS on fan-posted photos to locate celebrities in real time.
These aren't edge cases. If you've ever taken a photo at home and posted it online — Craigslist listing, eBay product photo, forum avatar, social media post — your location is out there in the metadata.
How to Check What Your Photos Reveal
Before stripping EXIF data, you should see what's there. Use our free EXIF Viewer — drag any photo onto it and it displays every metadata field, organized by category. No upload to a server — everything happens in your browser.
What to look for:
- GPSLatitude / GPSLongitude — If these exist, your photo has location data. Copy them into Google Maps and see exactly what address they resolve to.
- Make / Model / Software — Confirms device and editing history.
- Artist / Copyright — Check if your name is embedded. Many cameras were set up once and forgotten.
- SerialNumber / InternalSerialNumber — Uniquely identifies your specific camera body. Harder to change than GPS.
How to Strip EXIF Data Before Sharing
There are three approaches, ranked from simplest to most thorough:
1. Use a tool that strips EXIF (easiest)
Our EXIF Viewer lets you view all metadata, but many image processing tools also strip metadata automatically. When you run an image through Compress Image, Resize Image, or Image Converter on iluv.tools, EXIF data is stripped from the output by default.
2. Screenshot and recrop (zero-trust method)
If you want 100% certainty that no metadata survives: take a screenshot of the photo, crop to the image area, save as PNG. Screenshots don't contain EXIF data from the source image. This is the nuclear option — it also strips image quality — but metadata is absolutely gone.
3. Platform-native methods (per-device)
- iOS (Photos app): Share → Options → toggle off Location. This strips GPS but NOT device serial numbers or camera settings.
- Android (Google Photos): Tap photo → three dots → Details → Remove location. Same limitation — GPS gone, everything else remains.
- Windows: Right-click → Properties → Details → "Remove Properties and Personal Information" → "Remove the following properties from this file" → Select All.
- macOS: Preview → Tools → Show Inspector → GPS tab → "Remove Location Info". Or use
exiftool -all= image.jpgfrom the command line.
Which Platforms Strip EXIF for You (And Which Don't)
| Platform | Strips EXIF? | Notes |
|---|---|---|
| ✅ Yes | Strips all EXIF on upload. Good. | |
| ✅ Yes | Strips EXIF. Also recompresses image. | |
| Twitter/X | ✅ Yes | Strips EXIF since 2012. |
| ✅ Yes | Strips EXIF by default in most versions. | |
| Signal | ✅ Yes | Strips EXIF. Privacy-focused. |
| iMessage | ⚠️ Partial | Strips GPS on recent iOS. Serial numbers may persist. |
| Email (Gmail, Outlook) | ❌ No | Attachments retain full EXIF data. |
| ✅ Yes | Strips EXIF. | |
| Craigslist / OfferUp | ❌ No | Often preserves EXIF. Be careful. |
| eBay / Etsy | ⚠️ Inconsistent | Some recompression strips EXIF. Don't rely on it. |
| Forums / Image boards | ❌ No | Most small forums preserve uploaded files as-is. Assume EXIF survives. |
| Your own website | ❌ No | Unless you explicitly strip it, images you upload to your server retain full EXIF. |