Privacy

EXIF Metadata: What Your Photos Reveal About You

Every photo you share contains far more than what you see. Invisible data (GPS position, exact time, camera model) travels with the file. Whether personal or creator, you're affected.

9 min read

You just shared a photo. Nice shot. What you probably don’t know: someone can now know the exact address where you were that day.

No need to be a detective. The JPEG file itself contains the GPS coordinates. Latitude, longitude, sometimes altitude. It’s in the metadata, and it travels with your photo every time you share it.

This isn’t an obscure flaw for experts. It’s how every smartphone, every digital camera normally works. The problem affects your neighbor posting photos of their kids just as much as the freelance photographer putting their portfolio online or the tradesman documenting their job sites.

What EXIF metadata is

The EXIF standard has existed since 1995. It was designed to help software understand how a photo was taken: exposure, white balance, orientation. Perfectly legitimate use.

The problem: this same data includes your GPS location whenever geolocation is enabled on your device. And it’s enabled by default on nearly all smartphones sold today.

In practice, a JPEG file can carry up to 50 different data fields. Most are technical and harmless. A few are not.

What your photos really reveal

Here’s what a simple JPEG file can contain:

GPS location: precise latitude and longitude, sometimes within a few meters. On iPhone, photos taken at home contain your exact home address.

Exact date and time: not the send date, but the time the photo was taken. Combined with GPS, this creates a movement history.

Camera model and serial number: every digital camera and smartphone records its unique serial number in EXIF. This number is a persistent fingerprint: all your published photos taken with the same camera bear the same signature, whether taken yesterday or three years ago. In practice, even without GPS enabled, it only takes finding one geolocked photo among your publications with that serial number to cross-reference and identify you. This mechanism (not GPS alone) allowed identification of photojournalists covering protests, according to analysis published by the EFF.

Technical settings: exposure, ISO, focal length, shutter speed. This data reveals whether you use professional or amateur equipment.

Author and copyright: if you’ve configured these fields in your camera or editing software, your name can be readable directly in the file.

Orientation and altitude: on some devices, altitude is recorded, which can indicate a building’s floor or a mountain location.

All of that, in the file you email, upload to a forum or share via WeTransfer.

Two misconceptions to correct

Who can see your metadata?

Anyone with the original image file can read its EXIF metadata. No specialized tool is required: Windows displays EXIF in file properties, macOS in the Preview application, and dozens of websites let you read them in seconds.

What matters is knowing which version of the file is circulating: the platform-processed version (without EXIF) or the original file.

The finding is clear: social platforms process your files. Everything else transmits them intact.

In practice, this means sharing the same photo via Instagram (safe) then forwarding it by email to a client or uploading to your personal site exposes all your data.

Everyone is affected

It’s the point that technical guides often avoid clarifying.

You’re an individual and you post photos of your house for a real estate listing, your kids in the garden, your vacation? These files contain the GPS address of your home, your kids’ garden, the hotel where you’re staying.

You’re a creator (freelance photographer, videographer, designer) and you email your files to clients or put them for download on your site? Your camera body serial number, your settings, sometimes your full name: it’s all there.

You’re a tradesman or business owner and you document your work to put online? Photos of job sites, storefronts, work spaces can reveal addresses and schedules.

The threat is not abstract. Documented cases exist: journalists located via their photos, harassment victims found at home, anonymous content creators identified. It’s not paranoia, it’s a poorly understood feature.

How to check photo metadata

On Windows: right-click the file → Properties → Details tab. You see latitude, longitude, camera model, date.

On macOS: open the photo in Preview → Tools menu → Show inspector → GPS tab. Coordinates are displayed with a Maps link.

On iPhone: in the Photos app, tap “i” at the bottom of the photo: location and technical data appear.

Online: several tools read EXIF without installation. You drag the file, you see all the data in seconds.

It’s worth testing on your own photos. Most people are surprised by what they find.

How to remove metadata before sharing

Several methods exist. Windows allows you to remove personal data via file properties. macOS offers an option via Preview. Online tools do the same thing.

Impmage integrates this functionality directly in its Metadata tool, without your photos leaving your device.

GlitchGhost

Independent Developer

Independent developer specializing in web performance tools and image optimization. Creator of Impmage.

Web DeveloperPerformance SpecialistCreator of Impmage