What Is EXIF Data?
EXIF stands for Exchangeable Image File Format. It is a standard metadata format embedded in image files by cameras, smartphones and photo editing software. Every time you take a photo with a modern camera or phone, the device writes a hidden data block into the image file alongside the pixel data.
This hidden block can contain dozens of fields. Some are innocuous, such as the camera model or the image dimensions. Some are revealing, such as GPS coordinates and the exact timestamp. Some identify you directly, such as a copyright or author name. All of it travels with the file, which means it survives being emailed, backed up, copied to a USB stick or sent to a stranger.
What Information Does EXIF Data Contain?
Not every field carries the same weight. The table below groups the common ones by how much they actually expose about you, which is a more useful way to read a metadata dump than a flat list.
| Field | What it reveals | Privacy risk |
|---|---|---|
| GPS latitude, longitude, altitude | Where the photo was taken, typically accurate to within a few metres | High |
| Date and time original | The exact second the shutter fired, and often the time zone | High |
| Camera serial number | A unique identifier that links every photo shot on that body to each other | High |
| Author, artist, copyright | A real name, if the camera or editor was configured with one | High |
| Device make and model | The phone or camera used, for example iPhone 15 Pro or Canon EOS R5 | Medium |
| Software | The editing application and version that last wrote the file | Medium |
| Lens model and focal length | Which lens was fitted and how far it was zoomed | Low |
| Exposure settings | Shutter speed, aperture, ISO, whether the flash fired | Low |
| Orientation | Which way up the camera was held, used to rotate the image for display | Low |
The bottom half of that table is the reason EXIF exists and is worth keeping in your own archive: it is how photographers learn from their own settings. The top half is the reason to strip it before publishing.
Camera serial numbers deserve a specific mention because they are the field people never think about. Two photos posted under two different pseudonyms, with no location data at all, can still be tied to the same camera.
Why GPS in Photos Is a Serious Privacy Risk
If your phone has location services enabled for the camera app, which is the default on both iOS and Android, every photo carries your coordinates. That means:
- A photo taken at home contains your home address
- A photo taken at school contains the school location
- A photo taken at a workplace, a doctor surgery or a shelter can reveal a sensitive location
- A series of photos over time draws a map of where you go and when
Reading it takes no skill. Anyone who can download your image can open it in a metadata viewer, copy the coordinates into a map and see the building.
A Concrete Example of How This Goes Wrong
Consider the most ordinary situation imaginable. Someone photographs a bicycle in their driveway to sell it on a local marketplace, then uploads the picture straight from their phone gallery to the listing.
The listing itself shows only an approximate area, which is the privacy feature the marketplace advertises. But if that platform passes the original file through without processing it, the photo carries GPS coordinates from the driveway. A buyer who downloads the image gets the exact address, along with a timestamp that indicates when the seller was home, and a camera model that fingerprints their phone.
Nothing was hacked and no setting was misconfigured. The photo simply did what photos do. The same pattern applies to a rental listing, a photo of a lost pet with a "last seen near here" caption, or a picture of a child in a school uniform in a front garden.
The defence is not to stop taking photos. It is to strip the metadata from anything that leaves your control, which takes about five seconds once you know how.
How to View EXIF Data in Your Photos
The quickest cross-platform option is our free EXIF Metadata Viewer. Drop a photo in and it lists every field it finds, including a GPS block if one is present. The image is read in your browser and never uploaded, which matters when the whole point is that the file is sensitive.
If you would rather use what is already on your device:
- Windows. Right-click the file, choose Properties, then open the Details tab. Scroll to the GPS section. If latitude and longitude are listed, the photo is geotagged.
- macOS. Open the image in Preview, then choose Tools and Show Inspector, or press Command and I. The inspector has tabs for general information, EXIF and, when coordinates are present, a GPS tab with a map.
- iPhone. Open the photo in the Photos app and swipe up, or tap the information button. A map appears underneath if the photo is geotagged, along with the camera and lens details.
- Android. In Google Photos, swipe up on the image or tap the information button for the same detail panel, including a location map when one is stored.
How to Remove EXIF Data
The reliable browser-based method is to run the image through any of our tools that redraws it, such as the Image Compressor. Processing happens on a canvas, and a canvas has no way to carry the original metadata into its output, so the downloaded file is clean. Set quality to 90 or above if you want the visual difference to stay invisible.
Per platform, without leaving your device:
- Windows. Right-click, Properties, Details tab, then "Remove Properties and Personal Information" at the bottom. Choose to create a copy with all properties removed, which leaves your original untouched.
- macOS. Preview shows the data but is awkward for removing it. The dependable route is to export or re-encode the file, which is what a tool like ours does in one step.
- iPhone. In Photos, tap Share, then Options at the top of the share sheet, and turn Location off before sending. This strips the coordinates from the copy you share while keeping them in your library.
- Android. Google Photos offers a location toggle when sharing, and its setting for removing location data applies to shared copies rather than the originals.
One caveat worth knowing: stripping metadata is not the same as removing what is visible in the frame. A street sign, a house number or a reflection gives a location away just as effectively as a GPS tag. If that is a concern, our blur and pixelate tool handles the pixels, and the guide to redacting sensitive information covers doing it properly.
Do Social Media Platforms Strip EXIF Data?
Most large platforms re-encode uploads to their own sizes and formats, and metadata does not survive that process. The distinction that matters is between platforms that process your image and services that store the file exactly as you gave it.
| Service | Strips metadata | Re-encodes the image |
|---|---|---|
| Yes | Yes, resized and recompressed | |
| Yes | Yes, resized and recompressed | |
| X (Twitter) | Yes | Yes |
| TikTok | Yes | Yes |
| WhatsApp, photos sent in chat | Yes | Yes, heavily compressed |
| Yes for images uploaded to Reddit itself | Yes | |
| Yes | Yes | |
| Flickr | No, EXIF is displayed by default | No for the original size |
| Email attachments | No | No |
| Dropbox and Google Drive share links | No | No |
Two things follow from that table. First, the riskiest way to share a photo is the one that feels safest, which is sending the actual file to someone you trust rather than posting it publicly. Second, WhatsApp behaves differently depending on how you send: a photo in a chat is compressed and stripped, while the same photo sent as a document keeps everything.
Platform behaviour also changes without announcement, so treat the table as a starting point rather than a guarantee. The way to be certain is to check for yourself: upload a photo, download your own image back from the platform, and open it in the metadata viewer. If the GPS block is gone, the platform stripped it. That test takes a minute, and it is the only answer that is true today rather than whenever a table was written.
