EXIF explained
In 5 minutes: what a single photo reveals, why you should strip it, and which platforms do — or do not — clean it for you.
1. What is EXIF?
EXIF (Exchangeable Image File Format) is a block of hundreds of metadata tags tucked inside JPEG / HEIC files. Originally a camera-settings record, on smartphones it is now auto-populated with:
- 📍 GPS latitude / longitude — accurate to a few meters
- 📷 Make · Model · LensModel · SerialNumber — camera body, lens, serial
- 🕐 DateTimeOriginal — exact capture time
- 💻 Software — editing app used
- 👤 Artist · Copyright · OwnerName — some DSLRs embed your name
- 🖼️ 1st-IFD thumbnail — embedded thumbnail that can bypass crops/blur
2. Why GPS is the worst offender
Camera model or timestamp alone are usually low-risk. Latitude + longitude baked into the file, however, plots your home address, workplace, or your kid's school on a map — and stalking, burglary and insurance-fraud cases keep showing up because of it.
"GPS coordinates in a vacation photo can reveal your home address, and camera serial numbers can link photos back to you across services." — AI Metadata Cleaner
3. Why secondhand & real-estate listings are high-risk
Secondhand apps (Karrot/Danggeun, Bunjang) and real-estate listings (Naver Real-Estate, Zigbang) publish indoor photos taken right at your address. With GPS embedded, your street is published along with your listing — and cached copies survive even after you delete the post. Strip first, upload second.
4. Which platforms strip it automatically?
Do not rely on auto-stripping. As of 2025–2026, rough status:
- Instagram · Facebook · Twitter/X — strip most EXIF on upload, but DMs and "download original" may preserve it
- Reddit — strips eventually, but reports of metadata exposure during the processing delay
- KakaoTalk ("original" send) — the "send original" toggle preserves EXIF in full
- Naver Blog / Tistory — typically stripped when resized server-side, but no guarantee
- Karrot / Bunjang — believed to strip, but undocumented and app-version dependent
- Email / Google Drive / Slack — do not strip. The file is passed through as-is.
→ Bottom line: strip locally before sharing; do not trust the platform.
5. How does this tool work?
- JPEG: parsed with exifr, edited in place with piexifjs — pixel data stays byte-for-byte identical.
- PNG · WebP · HEIC: decoded via <img>, re-encoded through Canvas toBlob — the browser simply drops the metadata block.
- Everything runs in your browser. Open DevTools → Network before you drop files: zero upload requests.
6. Related tools
- heic.bal.pe.kr — iPhone HEIC → JPG / PNG batch converter (same "no upload" philosophy)
- FAQ — 15 frequently-asked questions
7. What to keep vs strip
Stripping every tag is not always the right call. Some fields are useful depending on your goal. Common cases:
- E-commerce / secondhand listings — Strip GPS, serial, model, and the Software tag (editing apps can look suspicious).
- Blog / social posts — Strip GPS and serial; keep camera/lens (you usually mention them in the post anyway).
- Portfolio / artist sites — Keep or set the Copyright/Artist fields; remove GPS and serial.
- Print-ready RAW / TIFF — Print labs need ICC profile and resolution metadata; do not strip everything — only GPS.
- Legal evidence / insurance claims — Keep the original intact — timestamp and location can be evidence. Make a separate sanitized copy to share.
8. Beyond EXIF — IPTC, XMP, MakerNote
Stripping EXIF alone is not enough. The same JPEG often carries IPTC, XMP, and MakerNote blocks.
- IPTC — news/wire standard for caption, keywords, byline. Lightroom and similar tools embed it casually.
- XMP — Adobe XML side-car for edits, ratings, GPS, byline; often embedded right inside the JPEG.
- MakerNote — vendor-specific block: lens micro-serial, shutter count, firmware. A solid fingerprint for tracking.
This tool clears EXIF, GPS, Maker, and MakerNote IFDs together. An option to also drop XMP/IPTC is on the roadmap.
9. Thumbnail leak — why blurring may not be enough
JPEGs ship a 160×120 thumbnail in the 1st IFD. If you mosaic-blur the main image, the thumbnail still holds a tiny copy of the unblurred original — that has caused real leaks.
This tool drops the 1st-IFD thumbnail as well. Open the file in any EXIF viewer before and after — the "thumbnail" entry disappears.
10. OS-level removal (for reference)
- Windows 11 — Right-click → Properties → Details → "Remove Properties and Personal Information" → "Create a copy". Removes GPS/author but may leave MakerNote.
- macOS — Preview → Tools → Remove Location Info. GPS only; other fields intact.
- iPhone (iOS 16+) — Photos → Share → Options → toggle off "Include Location". Strips GPS only for that share — the original keeps it.
- Android — Gallery apps vary; most allow "Remove Location" from photo info. MakerNote/serial needs a dedicated tool.
OS features only strip GPS. To clear serial, MakerNote, and thumbnail, use this tool or a dedicated CLI like ExifTool.
11. FAQ — short answers
- Q. Can stripped EXIF be restored? A. Not from the cleaned file — you need the original backup.
- Q. Does it degrade image quality? A. JPEG is lossless (pixels untouched). PNG/WebP/HEIC re-encode through Canvas — minor artifacts possible.
- Q. Does it handle videos? A. Photos only (JPEG, PNG, WebP, HEIC). Video GPS metadata needs a separate tool.
- Q. Bulk processing? A. ~50 photos at once is smooth; beyond that, split into batches based on RAM.
- Q. Where is the cleaned file saved? A. Wherever your browser saves downloads (default: Downloads folder). Nothing is stored on the server.
12. Real-world EXIF incidents (summary)
- 2012 — US Marine unit posted photos to social media; embedded GPS revealed helicopter location and led to a targeted attack.
- 2015 — Real-estate photos of a celebrity revealed GPS and timestamp, exposing the secure home address.
- 2018 — At a security conference, a single photo serial allowed researchers to link every other social account of the speaker — illustrating serial-based tracking risk.
- 2020 — On a Korean secondhand app, GPS in a furniture photo exposed the seller’s residence, leading to an attempted break-in.
- 2023 — Serial mismatch in a product photo proved counterfeit listings — an EXIF-as-evidence case.