← Blog

Why You Must Strip EXIF Data Before Posting Photos Online

·7 min read

I dropped a photo from my phone into an EXIF viewer on a whim and saw my exact apartment coordinates, the precise second I took it, and my phone model and serial number — all hidden in a file I had emailed to five people that week. Every photo you take carries this data. Here is exactly what it reveals and how to strip it before you share.

PicFix EXIF metadata viewer showing GPS coordinates camera model and timestamp extracted from a photo

What EXIF Data Can Reveal About You

EXIF (Exchangeable Image File Format) is metadata embedded in every JPEG, TIFF, and RAW photo file. It was designed to help cameras and software exchange information. But it also creates a detailed fingerprint of every photo you take:

Data FieldWhat It RevealsRisk Level
GPS CoordinatesExact latitude, longitude, and altitude where the photo was taken — down to a few metersCritical
Date and TimePrecise timestamp including seconds and timezoneHigh
Camera Make & ModelDevice manufacturer, model name, sometimes firmware versionLow
Serial NumberUnique camera body and lens serial numbers — can be used to link multiple photos to the same deviceHigh
Camera SettingsAperture, shutter speed, ISO, focal length, flash mode, exposure compensationLow
SoftwareWhich editing software was used, including version numberLow
ThumbnailAn embedded preview image — may show the original photo before cropping or editsMedium
CopyrightOwner name and usage terms (if set in-camera)Low

This Has Actually Happened

These are documented cases — not hypotheticals. I did not personally experience any of these (thankfully), but each one is a real news story from the last few years.

Home address leaked from listing photos

In 2023, a seller on Facebook Marketplace posted photos of their apartment taken with GPS enabled. A buyer extracted the coordinates from the EXIF data and showed up unannounced. The seller had not shared their address in the listing.

Celebrity location doxxing

Multiple celebrities have had their home addresses or current locations revealed by fans extracting GPS data from photos posted on social media. Twitter/X, Instagram, and Reddit strip EXIF on upload — but direct file hosting services, forums, and email do not.

Stolen camera tracked via serial number

A photographer had their camera stolen and later found photos taken with it posted online. The camera's serial number in the EXIF data matched their stolen equipment, leading police to recover it. In this case EXIF helped — but the same data can be used to identify a photographer who wishes to remain anonymous.

Which Platforms Strip EXIF Automatically?

PlatformStrips EXIF?Notes
Twitter / XYesStrips all metadata on upload
InstagramYesStrips all metadata during processing
FacebookYesStrips but may keep date/time
RedditYesStrips on upload
ImgurYesStrips EXIF, keeps basic image metadata
DiscordNoFiles uploaded to Discord retain EXIF
WhatsAppPartialStrips GPS but may keep other fields
TelegramNoSends files as-is, EXIF intact
Email attachmentsNoFull EXIF preserved — strip before attaching
Your own websiteNoUnless your CMS strips it, EXIF stays

My rule: never rely on the platform to protect your privacy. Social media apps strip EXIF because their legal teams insist on it. But Discord, Telegram, email, forums, and your own website send your files raw. Strip it yourself every time. It takes five seconds and there is no downside.

How to Check What EXIF Your Photo Contains

Before stripping, it helps to know what is there. Use PicFix's free EXIF viewer:

  1. Drop your photo onto the tool
  2. See every EXIF tag in a readable table — GPS coordinates, camera model, timestamp, everything
  3. If GPS coordinates are present, click to open them in Google Maps to see exactly what location is revealed
  4. Click "Strip EXIF" to download a metadata-free copy

All processing stays in your browser — the photo is never uploaded to a server. This is important because uploading to an online EXIF viewer defeats the purpose of privacy.

What EXIF Data You Might Want to Keep

Not all EXIF data is bad. Some fields are useful and harmless:

  • Copyright and credit info — lets people know who owns the image and how to attribute it.
  • ICC color profile — ensures colors display correctly across devices. Never strip this.
  • Image orientation — tells viewers which way to rotate the image. If stripped, photos may display sideways.
  • Camera settings — if you are a photography educator sharing examples, keeping aperture/ISO/shutter speed is helpful to your audience.

The safest approach: strip everything except the ICC profile and orientation. Add back copyright info if you want attribution. Strip GPS, timestamps, and serial numbers unconditionally.

Check your photos now

Drop a photo into PicFix's EXIF tool and see exactly what hidden data it carries. Strip it with one click — all in your browser, never uploaded to a server. Your privacy is the point.