How to Remove EXIF Data from Photos Before Sharing Them
When you take a photo on a smartphone or digital camera, the device records far more than just the image. Embedded inside every JPG file is a block of metadata called EXIF data — Exchangeable Image File Format — that can contain your exact GPS location, the date and time the photo was taken, your device model and serial number, and in some cases your name.
Most people have no idea this data exists. This guide explains what EXIF data contains, when it creates privacy risks, and how to remove it before sharing photos online or sending them to other people.
What is EXIF data?
EXIF is a standard developed in the 1990s for storing metadata alongside image data in JPG, TIFF, and other image formats. It was designed to give photographers information about the conditions under which a photo was taken.
A typical EXIF block from a modern smartphone contains:
Location data — GPS latitude, longitude, and altitude accurate to within a few meters. This is the most sensitive piece of EXIF data for most people. A photo taken at your home embeds your home address. A photo taken at a regular location you visit — a therapist’s office, a religious building, a specific person’s home — embeds that location.
Date and time — The exact date and time the photo was taken, accurate to the second. This can establish where you were at a specific time.
Device information — The make and model of your camera or phone. For phones, this includes the exact model number. Some devices also embed a serial number.
Camera settings — Aperture, shutter speed, ISO, focal length, flash status. Less sensitive but part of the EXIF block.
Software version — The firmware or OS version running on the device at the time of capture.
Orientation — The rotation of the camera when the photo was taken, used by viewers to display the image correctly.
Thumbnail — Many EXIF blocks contain a small thumbnail of the image, separate from the main image data.
When does EXIF data create real privacy risks?
Posting photos publicly on social media — Most major platforms strip EXIF data when you upload photos. Instagram, Twitter, and Facebook do this automatically. However, smaller platforms, forums, personal websites, and direct file sharing do not. If you upload a JPG directly to a website, attach it to an email, or share it via a file-sharing service, the EXIF data goes with it.
Dating app profile photos — If you use a photo directly from your phone’s camera roll on a platform that does not strip EXIF, you are sharing your home location with strangers. This is a genuine and documented safety risk.
Photos shared in online communities — If you post a photo on a forum, Discord server, Reddit, or any platform that preserves original files, EXIF data is visible to anyone who downloads the file and checks the metadata.
Selling items online — Photos of items for sale often include the home location of the seller embedded in the EXIF data.
Whistleblowing and investigative situations — Anyone who needs to share documentation while protecting their identity and location should remove EXIF data from all photos before sharing. There are documented cases of people being located through EXIF data in shared photos.
Real estate photography — Photos of a property for sale or rent include the precise coordinates of the property, which is probably fine, but also potentially establishes patterns of when the photographer (and by extension the occupant) was present.
Photos of children — Parents who share photos of their children publicly should be aware that each photo may embed the location of home, school, or regular activity locations.
How EXIF removal works technically
Removing EXIF data properly means zeroing out or stripping the EXIF segment from the JPG file’s binary structure. A JPG file is organized into segments, each beginning with a two-byte marker. The EXIF data lives in the APP1 segment (marker FFE1). Proper EXIF removal finds and removes this segment.
The simplest reliable approach is to draw the image onto an HTML5 canvas element and re-export it. Canvas does not preserve metadata — it works with raw pixel data only. The re-exported image contains the same visual content as the original but without any metadata attached.
This is how TinyTransform’s Remove EXIF tool works. When you drop a photo, the browser creates a canvas element, draws the decoded image onto it, and exports the result as a new JPG file. The EXIF segment is simply not written to the output file because canvas has no concept of metadata.
The trade-off is a minimal quality reduction because re-encoding as JPG involves one additional generation of compression. At quality 90% or above, this is imperceptible. The tool defaults to quality 92% which produces an output visually indistinguishable from the input.
How to remove EXIF data on TinyTransform
- Open the Remove EXIF tool
- Drop your JPG, PNG, or WebP photo onto the drop zone
- The tool displays the EXIF data found in the file — check what GPS and device data is present
- Click Remove EXIF Data
- Download the clean file
For multiple photos, the tool supports batch processing. Drop several files at once and download a ZIP containing all stripped versions.
Verifying that EXIF data has been removed
After downloading the stripped file, you can verify the EXIF data is gone using any EXIF viewer. Browser-based options include Jeffrey’s Exif Viewer (exifdata.com) or you can simply right-click the file on Windows, select Properties, and check the Details tab.
On Mac, open the file in Preview, go to Tools → Show Inspector, and click the Information icon to see metadata.
The location field should be absent or empty. The device model field should be absent. Date and time information from the original capture will also be gone.
What EXIF removal does not do
Removing EXIF data addresses the most obvious metadata vector but is not a complete privacy solution for images.
Visual content is still there. If a photo shows identifiable landmarks, house numbers, license plates, faces, or other identifying features, that information is visible regardless of whether the EXIF data is present.
Steganographic watermarks — some camera manufacturers and photo platforms embed invisible watermarks in the pixel data itself that persist through EXIF stripping. These are rare outside professional and surveillance contexts.
File timestamps — the file creation and modification dates stored by the operating system are separate from EXIF data and will reflect when you processed the file, not when the photo was taken.
Other metadata formats — some images contain XMP or IPTC metadata in addition to EXIF. The canvas re-export approach removes all of these simultaneously since it works at the pixel level rather than the segment level.
For sharing sensitive images where location and identity protection are genuinely critical, EXIF removal is one layer of a broader approach that should also include reviewing visual content carefully.