Privacy

EXIF Metadata: What Your Photo Says About You

You post an ordinary selfie or a photo of an item for sale — and along with the picture you publish your home's exact address, your phone model, and the time of the shot. Sounds paranoid? In fact it's baked into every photo, and it's called EXIF. Let's unpack what hides inside an image and how to wipe it in under a minute.

A laptop reading Secured with a world map and a padlock — personal data protection
Every photo carries a hidden layer of data about you. The good news: it's easy to erase. Photo: Pexels

What EXIF is in plain English

EXIF (Exchangeable Image File Format) is a photo's hidden passport, which the camera or smartphone writes straight inside the image file, in a hidden technical section of the file. The picture is what you see. EXIF is what the photo knows about itself and the circumstances of the shot.

The standard was originally devised for photographers: it's handy when a shot "remembers" its settings — shutter speed, aperture, ISO. But over time phones began adding far more, and an innocent technical block turned into a source of private data most people never suspect.

In short

EXIF is hidden data inside a photo: when, with what, and (often) where it was taken. It isn't visible in the picture, but any program can read it. Before publishing a shot, this data is worth checking and, if needed, wiping.

What a photo actually stores

The set of EXIF tags depends on the device, but a typical phone photo carries a surprisingly detailed dossier inside:

Date & time
The exact moment of capture
Device
Camera/phone make and model
Lens
Type, focal length
Settings
Shutter, ISO, aperture, flash
GPS
Latitude, longitude, altitude
Firmware
Device software version

Most of this is harmless. One line is dangerous — the GPS coordinates. If location services were on at capture time, the photo remembers the spot to within a few meters: latitude, longitude, sometimes altitude. And that point travels with the file wherever you send it.

The word PRIVACY spelled out in keyboard tiles — the theme of privacy and personal data
EXIF is privacy by default: the data is collected automatically, without your involvement. Photo: Pexels

The big risk: GPS in a published photo

Picture an everyday situation. Someone is selling an item on a classifieds site and photographs it at home. The buyer downloads the photo, opens the GPS tags — and sees the seller's exact address. The whole thing takes under thirty seconds and a free online tool.

From there, a whole set of scenarios you should know about:

  • Home address. A photo taken in your apartment and posted on a forum, a dating profile or a listing reveals where you live.
  • Children. Shots of a child in the yard or near a school give away where they are every day.
  • Routine. A series of photos from the same places adds up to a map of your habits: home, work, gym, café.

This isn't a theoretical risk. There are documented cases of people being tracked and stalked precisely through geotags in published photos. The attack needs no hacking — just downloading the picture and checking its GPS fields.

A simple safety rule

Before publishing a photo taken at home, at work, or in any personal place — strip the metadata. This matters most for shots strangers will see: listings, forums, profiles, public accounts.

Do social networks strip metadata?

The good news: on upload, major social networks usually re-save the image into their own format and strip most of the EXIF, including GPS. So a photo in your Instagram or Facebook feed is most often already "sanitized."

The bad news: you can't rely on it. Platform behaviour is inconsistent and changes without announcement, messengers and forums act differently, and sending a photo "as a file/document" or by email keeps the metadata intact. The same shot posted to a feed may be clean, while sent into a chat as a file it carries every coordinate.

The takeaway is simple: don't trust someone else's servers with the privacy of your data. It's safer to clean the photo yourself before it goes anywhere.

How to remove EXIF: four ways

Metadata can be wiped in several ways — from the operating system's built-in tools to automatic cleanup on conversion. Here are working options, from simple to universal.

1

Windows, built in

Right-click the photo → "Properties" → the "Details" tab → at the bottom "Remove Properties and Personal Information" → "Create a copy with all possible properties removed."

2

Disable the geotag in advance

In your phone's camera settings, turn off location access (on iPhone: Settings → Privacy & Security → Location Services → Camera → "Never"). Then GPS simply won't enter new shots.

3

Convert to another format

Re-encoding a photo — say JPG to PNG — usually doesn't carry the EXIF tags over. The metadata disappears on its own.

4

Dedicated tools

Mac, iOS and Android have no built-in "cleaner" — dedicated apps and utilities like ExifTool come in handy for bulk and precise cleanup.

Why conversion is the easiest path

Of all the methods, conversion is probably the most seamless and convenient. When you re-encode an image into another format, the program builds a new file from the pixels alone, and the EXIF tags, including GPS, usually just aren't carried into the result.

You get a pleasant two-in-one: you change the format to suit your task and remove the geolocation in a single step. For example, the JPG → PNG converter hands back a clean image with no coordinates. And if your main goal is to cut weight, look at re-encoding to WebP: it usually strips metadata too while making the file lighter.

Clean your photo of hidden data

Convert your shot with FormatZ — the in-browser converter rebuilds the image without the extra EXIF tags and GPS coordinates. Free, no install and no sign-up.

Convert JPG to PNG

And if you also need to cut the weight of your shots, our guide on how to compress images explains how to do it right.

When metadata is useful

It would be dishonest to claim EXIF is purely evil. In the right context it's genuinely useful:

  • For photographers the metadata helps dissect great shots: you can see which settings produced a good frame.
  • Cataloguing. Dates and geotags are handy for a personal archive — photos sort themselves by time and place in apps like Google Photos.
  • Authorship. You can write copyright and the author's name into EXIF — useful for protecting your rights to a shot.

So the rule isn't "always delete," but "delete before publishing to strangers." For your personal archive, let the metadata stay — it's working for you.

A photo is silent to the eye but speaks loudly to anyone who can read EXIF. Cleaning it before publishing takes a minute and saves far more.

To better understand the formats it's convenient to convert into, take a look at our breakdown of PNG vs JPG.

EXIF (Exchangeable Image File Format) is a photo's hidden passport, written by the camera or phone straight inside the image file. It stores the date and time of capture, the device and lens model, settings (shutter, ISO, aperture), and — if location was on — the precise GPS coordinates of where the shot was taken.
If you publish a shot with GPS tags, anyone can pull the coordinates in under thirty seconds with free tools. A photo from home reveals your address, a child's photo reveals their school, repeated shots reveal your routine. There are documented cases of people being stalked precisely because of geotags in published photos.
Major social networks usually re-save the image on upload and strip most EXIF, including GPS. But you can't rely on it: rules change, messengers and forums behave differently, and sending a photo 'as a file' or by email keeps the metadata intact. It's safer to clean the photo yourself before publishing.
On Windows: right-click the photo → Properties → Details → 'Remove Properties and Personal Information' → create a copy with properties removed. On a phone you can disable the location tag in the camera settings in advance. A universal method is to re-save or convert the photo to another format: conversion usually strips the EXIF.
Usually yes. When you re-encode an image into another format — say JPG to PNG — the service EXIF tags, including GPS, normally aren't carried over. It's a handy side effect: you change the format and remove the geolocation in a single step. Try JPG → PNG.