Reproducible lab · Photo privacy

EXIF Privacy Lab: What a Photo Can Reveal

A JPEG can carry location, device, software, and capture-time data that is not visible in its pixels. This lab lets you inspect a harmless controlled file, remove its EXIF locally, and compare the result without using anyone's real photo or personal data.

What the sample contains

The archive contains the same JPEG pixels twice. The “before” file was given clearly synthetic EXIF values: a fictional camera, a date in 2000, and latitude/longitude 0,0. The “after” file was produced with the same empty-EXIF operation used by this site's remover. Neither file contains a person's filename, location, device ID, or other real-world personal data.

Observed before and after

On July 23, 2026, both files were parsed with the project's EXIF parser. The controlled fields below were present in the source and absent from the cleaned copy.

FieldSynthetic beforeAfter removal
Camera makeEXIFDataView LabNot present
Camera modelSynthetic CameraNot present
SoftwareEXIFDataView controlled sampleNot present
Capture time2000-01-01 12:00:00 (EXIF local time)Not present
GPS latitude0° N (synthetic Null Island coordinate)Not present
GPS longitude0° E (synthetic Null Island coordinate)Not present
Test methodology

This test checks a narrow, reproducible question: whether the site's current JPEG cleanup operation removes the controlled EXIF fields in this sample.

Sample

Two JPEGs in samples.zip: synthetic-before.jpg and synthetic-after.jpg. SHA-256: before 04c1d69f…02cdfe; after 74eb7ff1…2680b8.

Environment

EXIFDataView source as tested on July 23, 2026; piexifjs writes and clears EXIF, and exifr 7.1.3 performs the verification parse.

Steps

  1. 1. Extract the archive and upload synthetic-before.jpg to the EXIF viewer.
  2. 2. Confirm the fictional camera, 2000 capture time, and 0,0 GPS fields.
  3. 3. Upload the before file to Remove EXIF and download the result.
  4. 4. Inspect that result again and compare it with synthetic-after.jpg.

Limitations

  • The result covers this JPEG and this implementation, not every image format or editor.
  • Removing EXIF does not blur faces, signs, landmarks, reflections, or other visible clues.
  • A service may keep a separate database location even when the downloaded file has no EXIF GPS.

Which fields deserve review?

GPS coordinates can identify a precise place. Capture time can show when a person was there. Camera make, model, software, artist, and copyright fields can connect files across accounts or reveal a workflow. Normal exposure settings such as aperture and ISO are usually less sensitive, but context matters.

Keep an original if the metadata matters for your archive or authorship workflow. Share a cleaned copy, then inspect the exact file you plan to send. Use the destination app's location controls as a second safeguard, not as proof that the file itself is clean.

Try the complete workflow

  1. Inspect the controlled source and note which fields the viewer groups as GPS, camera, and time.
  2. Remove the EXIF locally from a copy in your browser.
  3. Edit selected EXIF fields only when preserving intentional metadata is the better choice.
Test and editorial review

The downloadable files, field table, and limitations were checked together. Report a reproducible mismatch through the corrections workflow.

Huy

Editor, EXIFDataView

Published
Jul 23, 2026
Updated
Jul 23, 2026
Last tested
Jul 23, 2026

Corrections and reproducible issues belong in the contact workflow. We update visible dates only when the page content or testing notes materially change.

Continue with sharing controls, location risk, and practical cleanup guidance.

Privacy guidesUpdated Jul 22, 2026
A source-backed review of Apple and Google Photos sharing controls, documentation gaps, and the safest workflow before posting an image.

By Huy · Published Jul 22, 2026

Provenance guidesUpdated May 14, 2026
A practical guide to signed provenance records, validation status, edit history, and what Content Credentials can and cannot prove.

By Huy · Published May 14, 2026

Privacy guidesUpdated Aug 20, 2025
Understand how GPS tags end up in photos, which fields create the largest privacy risk, and how to audit them before posting.

By Huy · Published Aug 20, 2025