What is EXIF Data and Why It Matters for Privacy

EXIF is a record, not proof

EXIF (Exchangeable Image File Format) stores structured information alongside an image. It can describe capture settings, equipment, time, location and display orientation. It is only one metadata family: XMP, IPTC, comments and color profiles may also be present.

A field can be missing, copied from another image, changed by software or deliberately edited. A camera model is not a unique device identifier; a serial number, when present, may be more identifying. Neither proves who took a picture. The ExifTool EXIF tag reference documents fields and writable types; it is not a guarantee that your file contains them.

Read these fields together

Field or group	Practical interpretation	Important limitation
Make, Model, LensModel	Equipment labels useful for organizing photos	May be absent or edited
ExposureTime, FNumber, ISO	Recorded exposure settings	Not a recipe for reproducing the scene
DateTimeOriginal	A claimed capture date and local clock time	Not automatically a UTC instant
OffsetTimeOriginal	A separate UTC offset for capture time	May not be present
GPS coordinates	A stored location worth reviewing before sharing	Not present in every photo or proof of the photographer’s location
Orientation	How stored pixels should be displayed	Removing it can change appearance
Artist, Copyright, Software	Attribution or processing clues	Not authenticated ownership or a complete editing history

For example, 2026:10:24 09:30:00 without an offset does not tell you whether the camera clock meant Beijing or London time. A wrong camera clock remains wrong in EXIF. Do not silently add Z or infer a timezone from your computer.

Inspect an original without over-reading the result

1. Keep an untouched original and open a copy in the EXIF Viewer.
2. Review GPS, date/time, camera and all-fields tabs. Look for names, descriptions and software as well as coordinates.
3. Export JSON or CSV if you need a comparison record. Treat that export as sensitive too.
4. Record the exact field names and date strings. The viewer currently keeps EXIF dates as strings rather than reviving them as JavaScript Date objects; a displayed clock time still does not supply a missing timezone.
5. If a field is missing, distinguish “not reported by this reader” from “definitely absent from the file.”

The viewer uses exifr with several metadata families enabled. Its all-fields tab means all returned fields, not a forensic inventory. Parsing errors can also produce an empty result. A missing GPS warning is not a privacy certificate.

Choose a sharing workflow

For selective changes, the JPEG EXIF Editor exposes capture time, make/model, latitude/longitude, description, artist and copyright. Its GPS-removal action clears the EXIF GPS group; it is not a scrub of location text in XMP, IPTC, descriptions or the visible image. It does not expose an Orientation control.

For a new sharing copy, the EXIF Remover accepts JPEG, PNG and WebP. It decodes the image, draws it onto canvas and encodes a new file. This is not metadata-only, lossless deletion. JPEG and WebP output can introduce compression changes even at the maximum quality setting; PNG compression being lossless does not make the whole browser rendering pipeline pixel-identical to the source. Color handling and file size can change.

Verify the actual file you will send

Download the processed copy, reopen it in the viewer, and compare sensitive fields and appearance. Check upright orientation, mirrored writing, dimensions, color and transparency where relevant. The remover’s count compares parser-reported fields before and after export; it is not a complete file audit. For higher assurance, inspect locally with another reader, for example the read-only command exiftool -a -G1 -s "shared.jpg"; see the official command documentation.

Inspect pixels too: faces, signs and addresses survive metadata removal. If a sharing service transforms the file, check the copy a recipient can actually download rather than assuming a platform always strips metadata.

Continue with controlled examples

Use the synthetic metadata lab to explore known inputs. Synthetic cases are not real-camera field testing or evidence of compatibility with every browser.

Read orientation troubleshooting before stripping a sideways photo, and PNG versus JPEG metadata before treating a file extension as a privacy rating.