Your EXIF Metadata Is Leaking Your Location
Every photo you take embeds GPS coordinates, camera model, and timestamps. Strip EXIF before sharing.
When you take a photo with your phone, the camera writes a block of metadata called EXIF (Exchangeable Image File Format) into the JPEG. This data is invisible in the image preview but trivially readable by anyone who downloads the file.
What EXIF stores
- GPS coordinates — latitude and longitude, accurate to a few meters
- Timestamp — when the photo was taken (separate from the file's creation date)
- Camera model and serial number — identifies your device
- Exposure settings — ISO, aperture, shutter speed, focal length
- Software — the app or editor that last saved the file
A single photo taken at home can reveal your exact address to anyone who receives it.
How platforms handle it
| Platform | Strips EXIF? |
|---|---|
| Twitter/X | Yes |
| Yes | |
| Partially | |
| WhatsApp (sent as photo) | Yes |
| WhatsApp (sent as document) | No |
| Email attachments | No |
| Discord | No |
The pattern is inconsistent. Never rely on the platform — strip it yourself.
Stripping EXIF in the browser
You don't need an app. Canvas-based stripping works entirely client-side:
function stripExif(file) {
return new Promise((resolve) => {
const img = new Image()
img.onload = () => {
const canvas = document.createElement('canvas')
canvas.width = img.width
canvas.height = img.height
canvas.getContext('2d').drawImage(img, 0, 0)
canvas.toBlob(resolve, 'image/jpeg', 0.92)
}
img.src = URL.createObjectURL(file)
})
}This re-encodes the image from a canvas, which drops all original metadata. The trade-off: slight quality loss on JPEGs, and it won't work if you need to preserve the original color profile.
When to keep EXIF
- Proof of authenticity — journalism, legal evidence
- Photography portfolios — lens and exposure data for other photographers
- Location tagging — travel and nature photography
The key is choice — you should decide when metadata stays and when it goes.
The Image Toolkit lets you inspect EXIF metadata across 6 categories and strip it before sharing — all in your browser, no upload required.