metadataprivacypngjpegsecurity

PNG vs JPEG Metadata: Which Format is Safer for Your Privacy?

Compare JPEG metadata with PNG eXIf, text and XMP chunks, then inspect and verify a sharing copy without treating conversion as a privacy guarantee.

by ExifCheck Team

Neither extension is a privacy rating

A JPEG can contain no GPS, and a PNG can contain EXIF location data or identifying text. Choose a format for image needs, then inspect the actual file. Changing an extension does not remove anything; converting an image changes privacy only insofar as the converter copies, replaces or discards metadata.

A PNG screenshot is not automatically safe, and JPEG is not automatically a location leak. The question is which information survives your particular export.

Where metadata can live

StructureJPEGPNG
EXIFCommonly in APP1 segmentsSupported in the eXIf chunk
XMPCan be in APP1 segmentsCan be stored in iTXt text
Other descriptive informationIPTC/Photoshop data and comments may existtEXt, zTXt and iTXt can carry text
Rendering informationColor profile and image structureColor profile, gamma, transparency and other image structure
Location or identityDepends on stored fields and visible contentDepends on stored fields and visible content

The W3C PNG specification, section 11.3.4.5 explicitly defines an EXIF profile chunk. Its text section also documents textual data and the XMP keyword XML:com.adobe.xmp. PNG’s lack of JPEG-style APP1 segments does not mean it lacks EXIF.

For a reader-oriented inventory, compare the primary ExifTool JPEG tag documentation and PNG tag documentation. File capabilities do not establish which fields any specific application writes or reads.

Inspect before converting

  1. Keep the original. Open the candidate sharing copy in the EXIF Viewer.
  2. Review GPS, camera, dates and all returned fields. Look for author names, copyright, descriptions and software identifiers, not just a GPS badge.
  3. Do not treat an empty result as proof of an empty file. The viewer’s exifr parser has format and structure limits; it is not a complete PNG chunk auditor.
  4. If privacy matters beyond a quick check, use a second local reader and compare the original with the final exported copy.

For example, this is a read-only inspection using ExifTool, if installed:

exiftool -a -G1 -s "original.png"
exiftool -a -G1 -s "shared.png"

The official ExifTool options explain duplicate reporting, group names and short tag names. Review groups as well as labels: similar descriptions or locations can appear in more than one metadata family. Local filesystem timestamps in such output are not the same thing as embedded capture dates.

EXIF values are mutable. GPS can be absent or edited, and a capture date without a separate timezone offset is not necessarily a precise global timestamp. See how to interpret EXIF rather than assuming every field is accurate.

What a removal workflow costs

The EXIF Remover accepts JPEG, PNG and WebP and builds a new image through browser decoding, canvas drawing and re-encoding. It does not simply delete selected original segments or chunks.

JPEG and WebP output can incur lossy compression changes even at the highest quality setting. PNG compression is lossless, but that does not promise byte identity, original color-profile retention or source-pixel identity across the rendering pipeline. Compare color, fine detail, dimensions, file size and transparency rather than describing every removal as lossless. Canvas export creates a new bitmap file under the HTML serialization rules.

The tool relies on the browser decoder to apply image orientation. Displayed orientation has been checked in synthetic cases, not every browser/format combination. Use the orientation guide if a processed photo rotates or mirrors unexpectedly.

The JPEG EXIF Editor is for selected JPEG fields, not PNG editing or a complete privacy audit. Clearing its EXIF GPS group does not remove location written in another metadata family or in visible text.

Why screenshots are not a reliable shortcut

A screenshot creates a new image of a displayed view. It may omit original metadata, but the screenshot tool can add its own information, and visible names, maps or addresses remain. Scaling, cropping and color handling can change the image. Saving as PNG does not itself cause a second lossy JPEG compression, nor does it establish privacy.

Verify the deliverable, not just the format

Download the output and reopen that exact file in the viewer and, when appropriate, a second reader. Technical dimensions or color data can remain without being personal location records; do not confuse “some tags remain” with either a failed cleanup or a privacy guarantee. Check the visible image and the filename separately.

Use the synthetic metadata lab for controlled examples with known inputs. These are not real-camera trials or all-browser validation. If a sharing platform processes your upload, inspect the recipient-downloadable version too. Neither a PNG suffix nor a reassuring tag count substitutes for this verification.

Related Posts

metadata · privacy · png