How to Check What Personal Data Is Hidden in Your Photos

Start with the file you intend to share

A photo may contain EXIF, XMP or IPTC metadata, but not every image has every field. A camera original, an edited export and a downloaded preview can have different records even when they look alike. This tutorial checks a specific file; it does not certify a person’s identity, location or anonymity.

Keep the original privately and work on a copy. Identify the actual attachment or export you will send, including its filename, format and dimensions. If you are learning, try the metadata-check lab before using a personal photo. A demonstration is practice, not evidence about your own file.

1. Read the fields, not just the map

Open the sharing copy in the EXIF viewer. Review the available fields, including groups beyond GPS. Use this checklist:

Field or group	What to examine	What not to conclude
GPS latitude/longitude and reference directions	Coordinates, altitude and any location text in other metadata groups	Recorded coordinates are not proof that someone was there
DateTimeOriginal and OffsetTimeOriginal	Capture time and its separate UTC offset, if present	A time without an offset is not an unambiguous global instant
OwnerName / CameraOwnerName, Artist, copyright	Names, email addresses or other identifying text	The owner field does not authenticate the photographer
SerialNumber / BodySerialNumber, lens serial, make/model	Unique identifiers versus a model shared by many devices	A model alone does not uniquely identify a device or person
Software, descriptions and keywords	Application names, versions, personal notes and location references	A Software tag is not a complete editing history

ExifTool’s EXIF tag reference documents the separate capture-time offset and owner/serial fields; names can differ between readers. These are recorded values: clocks can be wrong and metadata can be edited, copied or removed.

A filesystem creation or modification date may describe copying or downloading rather than capture. Do not substitute it for a missing shooting time. Likewise, a missing timezone does not justify guessing one from the viewer’s local settings.

2. Treat an empty result as a limited observation

“No GPS shown” means that this reader did not display GPS in this file. It does not prove that every metadata container is empty. A reader may not support a format or a proprietary field, and an export can carry overlapping values in EXIF, XMP or IPTC. Check warnings and confirm that you opened the intended file.

For a second local inspection, if ExifTool is installed, run this read-only command:

exiftool -a -G1 -s "share-copy.jpg"

Replace the filename with your copy. It lists readable tags with group names and duplicate tags; it does not remove anything. The ExifTool FAQ explains these options and cautions that location information is not confined to the EXIF GPS group. An unsupported or damaged file still needs investigation, not a clean bill of health.

3. Make an export, then inspect that export

For a public listing, you may decide that no location, personal name or device serial is needed. Use the metadata remover on a copy, download the output, and reopen that downloaded file in the viewer. Do not rely solely on a success message.

If you need to correct a date or preserve a credit, the metadata editor may be more suitable for its supported fields and formats. Editing one displayed field does not establish that duplicate values elsewhere were removed.

Compare the before/after values against your intended disclosure. Also open the exported image normally: check orientation, color, dimensions and legibility. Removing or rewriting metadata can affect how an image is rendered. If the output is unsupported, still exposes a sensitive value, or looks wrong, stop and choose another export workflow.

4. Inspect what the pixels and package reveal

Zoom into addresses, badges, faces, vehicle plates, reflections, school logos, screens and documents. Metadata removal does not redact those pixels. If an embedded thumbnail or preview is exposed by your inspection tool, examine it too; do not assume it matches a later crop. Export a flattened redacted copy and verify the result rather than sending an editable project.

Check the filename, caption, location sticker and any accompanying sidecar files separately. A clean image does not clean the message or account that carries it.

5. Verify the delivery path

Share only the verified export, not the original beside it. Then follow the share-path comparison tutorial using a harmless test file to check what a recipient can actually download.

Your practical result should be specific: “The exported JPEG no longer displays the GPS and owner fields in these readers.” That is useful evidence about a file, not a promise that a platform has no original, that every reader will agree, or that the scene cannot identify you.