Anyone sharing photos publicly · 7 min read
What information can photo metadata reveal?
A practical guide to location, time, device, ownership, editing, preview, and technical fields stored alongside image pixels.
A photo is more than its visible pixels
Image formats can store structured records used by cameras, editors, newsrooms, and catalog systems. These records may describe when and where an image was captured, which device created it, who owns it, and how software handled it.
Metadata is not automatically harmful. Orientation and color profiles can make the picture display correctly. Privacy depends on the field, the sharing context, and what the visible image already reveals.
The fields that deserve the most attention
GPS coordinates are the clearest high-risk example because they can identify a home, workplace, school, or travel location. Owner names, camera serial numbers, document identifiers, user comments, and embedded previews can also disclose information that is not visible in the main image.
Review checklist
- ✓ Exact GPS latitude and longitude
- ✓ Camera owner or author names
- ✓ Device serial and document identifiers
- ✓ Comments, descriptions, and keywords
- ✓ Embedded thumbnails or previews
Context changes the risk
A camera model in a landscape photo is usually a technical detail. The same model and timestamp may matter more to a journalist protecting a source or an employee sharing evidence from a restricted site.
Use risk labels as a prompt for judgment, not as a substitute for reviewing the purpose and audience of the share.
A safer sharing routine
Scan the original, remove fields that do not need to travel, flatten any visual redactions, then inspect the exported copy. Keep the original private and share only the verified derivative.
Review checklist
- ✓ Review hidden metadata
- ✓ Inspect the visible background and reflections
- ✓ Use solid masks for secrets
- ✓ Verify the exact exported file
Put it into practice
Check the exact photo you plan to share
The scanner works locally and does not add your filename or extracted metadata to an analytics request.
Open the privacy check