ilovejpg treats JPG metadata as something every photographer should understand, because the information hidden inside an ordinary photo can say more than the picture itself. A single file from a modern phone may record where it was taken to within a few metres, the exact second the shutter fired, the make and model of the device and sometimes a serial number. Knowing how to remove EXIF data is therefore a basic privacy skill, not a specialist one.
This article explains what EXIF is and what it stores, how the related IPTC and XMP standards fit in, where the real risks lie, why you should not rely on websites and apps to clean files for you, and how re-encoding a photo strips its metadata. It also covers the orientation tag that catches many people out, simple ways to inspect a file before sharing, and sensible habits for journalists, online sellers and parents.
What EXIF metadata is and what it records
EXIF, the Exchangeable Image File Format, was introduced by the Japan Electronic Industry Development Association in 1995 and is now maintained jointly by the Camera and Imaging Products Association (CIPA) and JEITA. In a JPEG file, EXIF data lives in an APP1 marker segment near the start of the file, organised internally as a small TIFF-style directory of tagged values. Because a JPEG marker segment is limited to 64 KB, EXIF blocks are compact, but they can still hold a great deal.
Camera and capture settings
- Make and model of the camera or phone, and often the lens model.
- Exposure time, aperture (f-number), ISO sensitivity, focal length, flash status, white balance and metering mode.
- The software or firmware version that produced or last edited the file.
- Manufacturer-specific MakerNote data, a proprietary block that can contain internal settings and, on some cameras, details such as shutter count.
Timestamps
EXIF usually records several times: DateTimeOriginal for when the photograph was taken, DateTimeDigitized for when it was converted to digital form, and DateTime for when the file was last changed. Newer versions of the standard add time-zone offsets, and the GPS block carries its own satellite-derived UTC timestamp. Together these can establish not just the day but the precise moment and the local time zone.
GPS location
When location services are enabled for the camera app, the GPS directory stores latitude, longitude and often altitude, direction of view and positional accuracy. Phone GPS combined with Wi-Fi and cellular positioning is frequently accurate to a few metres, which is enough to identify a specific house, the entrance of a school or the spot where you regularly park.
Device identifiers and thumbnails
Some cameras write a body serial number and a lens serial number into dedicated EXIF tags. That can link photographs published under different names to the same physical device. EXIF also commonly embeds a small preview thumbnail, typically around 160 × 120 pixels, stored in its own directory. Editing software is supposed to regenerate this thumbnail when the main image changes, but not every program does so, which means a cropped or retouched photo can still carry a preview of the original, uncropped frame.
The embedded thumbnail is the most overlooked part of EXIF. If you crop something sensitive out of a photograph, make sure the tool you use rebuilds or removes the thumbnail as well.
IPTC and XMP in brief
EXIF is not the only metadata a JPEG can carry. Two other standards are common in professional workflows, and both can hold personal information.
- IPTC: the Information Interchange Model developed by the International Press Telecommunications Council for news agencies. In JPEG files it is usually stored inside an APP13 segment and records captions, keywords, the photographer's name, credit lines, copyright notices and contact details.
- XMP: the Extensible Metadata Platform, introduced by Adobe in 2001 and standardised as ISO 16684-1. It is XML-based, stored in its own APP1 segment, and can describe almost anything, including ratings, licensing terms, editing history, the names of people tagged in the image and references to the original file.
- ICC profiles: not metadata about you, but colour profile data stored in APP2 segments that tells software how to interpret the colours.
Photo management applications often write the photographer's name, address or email into IPTC and XMP fields automatically, based on a preference set once and then forgotten. A file intended for a private client may therefore carry contact details into a public posting.
The real privacy risks of sharing photos with location data
Metadata risk is easy to overstate in theory and understate in practice. A single holiday photograph with coordinates of a beach reveals very little. The danger arises from patterns and from photographs taken at places that matter.
- Home address: a picture of a new sofa, a pet or a child's drawing taken indoors may carry coordinates that point straight to your front door.
- Routines: a series of photographs with locations and times can reveal when a house is empty, which route a person walks or where they work.
- Children's locations: images taken at a school gate, nursery or sports club can disclose where a child can be found on particular days.
- Linking identities: a camera serial number or distinctive software string can connect an anonymous account to a named one.
- Contradicting a story: timestamps and coordinates may reveal that a photograph was taken somewhere other than where the sharer implied, which matters for sellers, reporters and anyone in a dispute.
None of this requires specialist skill to exploit. Freely available viewers display coordinates on a map with a single click, and many desktop operating systems show location fields in a file's properties panel.
Which platforms strip metadata, and why you should not rely on it
Large social networks generally remove EXIF data from images when they generate the public versions, partly for privacy and partly because they re-encode every upload to standard sizes anyway. That is a reasonable default, but it is a poor thing to depend on.
| Sharing route | Typical metadata behaviour | Why caution is still needed |
|---|---|---|
| Large social networks | Public copies are usually re-encoded and stripped | The platform may still read and keep the original metadata; policies and behaviour can change |
| Messaging apps sending a photo | Images are often recompressed, removing much EXIF | Sending the same image as a file or document typically preserves the original untouched |
| Email attachments | The file is sent exactly as it is | All EXIF, IPTC, XMP and thumbnail data reach the recipient |
| Cloud storage share links | The original file is shared | Anyone with the link can download the full metadata |
| Online marketplaces and forums | Varies widely between sites | Some keep originals available for download or zoom views |
| Your own website or blog | Depends on the content system and plugins | Many systems keep the uploaded original alongside resized copies |
There are good reasons not to rely on the platform. Stripping public copies does not necessarily mean the service discards the data; it may have read your coordinates on upload. Behaviour also differs between the web, the app and the different upload paths of the same service. Most importantly, files rarely stay where you first posted them; they are forwarded, saved and re-uploaded elsewhere, and the cleaner version is not always the one that travels.
The only metadata you can be certain about is the metadata you removed yourself before the file left your device.
How re-encoding in ilovejpg removes EXIF
The ilovejpg JPG editor works by decoding your image into the pixels of an HTML5 canvas inside your browser, applying whatever changes you choose, and then encoding those pixels into a brand-new file. The new file is built from pixel values alone. EXIF, IPTC and XMP segments, the embedded thumbnail and the GPS block are simply not part of what the canvas exports, so none of them appear in the download.
- Open the photo in the editor; it never leaves your device, because processing happens locally rather than on a server.
- Make any changes you need, such as resizing for a listing or adding a text overlay, or make no changes at all if you only want a clean copy.
- Choose JPG, PNG or WebP as the output format and set the quality; for a clean copy of a photograph, a JPG quality around 85 to 92 keeps the loss very small.
- Download the result and keep your original privately if you want to retain its metadata for your own records.
Because the output is a fresh encode, it is technically a lossy step for JPG and WebP output. At high quality settings the difference is very hard to see, but you should avoid running the same photograph through repeated re-encodes. Strip metadata once, from your best original.
Canvas encoding also drops the embedded ICC colour profile and produces a file intended for the standard sRGB colour space. Photographs from recent phones are sometimes captured in a wider gamut such as Display P3, so very saturated colours may shift slightly after re-encoding. For sharing online this is rarely noticeable, but it is worth knowing if exact colour matters.
Orientation tag pitfalls
Cameras and phones usually save the sensor's pixels in a fixed landscape arrangement and record how the device was held in the EXIF Orientation tag, which takes values from 1 to 8 covering every combination of rotation and mirroring. Viewing software reads the tag and rotates the image on screen. This saves processing on the device, but it causes problems when metadata is removed carelessly.
- If a tool deletes the EXIF block without first rotating the pixels, the photo appears sideways or upside down everywhere afterwards.
- Older software that ignores the tag may show an image sideways even while a phone shows it upright, which confuses people into rotating it manually and producing a double rotation.
- A file with conflicting rotation, for example pixels rotated by an editor but the old tag left in place, can display correctly in one program and wrongly in another.
Current browsers apply the orientation tag when they decode an image, so when the ilovejpg editor draws a photograph onto the canvas, the pixels are already the right way up and the exported file needs no tag at all. If an image ever does appear rotated in the preview, the rotate and flip controls fix it directly in the pixels, which is the most dependable form of correction because it no longer relies on any viewer reading a tag.
After stripping metadata, always open the downloaded file in a different program from the one you used to create it. If it is upright there, the orientation has been written into the pixels correctly.
Checking a file before you share it
A quick inspection takes less than a minute and removes the uncertainty.
Built-in operating system tools
- Windows: right-click the file, choose Properties and open the Details tab, which lists camera, date and GPS fields; the Remove Properties and Personal Information option there can also create a cleaned copy.
- macOS: open the image in Preview, choose Tools and then Show Inspector, and look for the EXIF, IPTC and GPS tabs; a GPS tab with a map indicates location data is present.
- iPhone and iPad: in the Photos app, swipe up on a photo to see its location and capture details; the share sheet's Options menu lets you exclude location for that share.
- Android: the photo details panel in most gallery apps shows location, and many camera apps have a setting to stop saving location in the first place.
Dedicated tools
For thorough checks, the free command-line program ExifTool reads virtually every metadata format, including MakerNotes and XMP. Running it on a file lists every tag present, grouped by where it is stored, which makes it easy to confirm that a cleaned file contains nothing beyond basic image structure.
Prevention is simpler than cleaning. If you rarely need location in your photos, switch off location tagging in the camera app and enable it only for trips where you want it.
Responsible practice for journalists, sellers and parents
Journalists and researchers
Metadata can protect or endanger sources. A photograph supplied by a whistle-blower may carry a serial number or coordinates that identify them, so strip metadata from any source-supplied material before publication, and handle the original securely. At the same time, metadata is valuable evidence for verification; keep the untouched original in protected storage and record what was removed and why. Be aware that provenance systems such as C2PA content credentials deliberately attach signed information to images, which serves authenticity but must be weighed against the safety of the people involved.
Online sellers
Product photographs taken at home are a common source of leaked addresses. Strip metadata from every listing image, avoid including house numbers, addressed letters or windows with recognisable views in the frame, and be cautious about photographing serial numbers of expensive items in full, since they can be misused. Resizing listing images at the same time also makes pages load faster for buyers.
Parents and carers
Photographs of children deserve the most care. Remove location data before sharing outside a trusted circle, think twice about school uniforms, badges and name tags visible in the picture, and avoid posting in real time from places a child visits regularly. Sharing a day or two later, from a cleaned file, removes most of the practical risk without giving up the pleasure of sharing.
Frequently Asked Questions
What is JPG metadata?
JPG metadata is information stored inside the image file alongside the pixels. The most common kind is EXIF, which records camera settings, timestamps, device details, an embedded thumbnail and often GPS coordinates. Files can also contain IPTC and XMP fields with captions, author names, copyright notices and editing history. None of it is visible in the picture itself, but any suitable viewer can display it.
How do I remove EXIF data from a photo?
Re-encode the image in a tool that rebuilds the file from its pixels. In the ilovejpg editor, open the photo, make any changes you want, choose the output format and download it; the new file contains no EXIF, IPTC or XMP data and no GPS block. Windows also offers a Remove Properties option, and ExifTool can strip metadata without re-encoding the pixels.
Do social media sites remove location data from photos?
Most large social networks remove EXIF from the public copies of uploaded images, but that is not a guarantee of privacy. The service may still read your coordinates during upload, behaviour can differ between apps and upload methods, and files sent by email, cloud link or as documents in messaging apps usually keep everything. Cleaning the file yourself is the only dependable safeguard.
Will removing metadata reduce image quality?
Removing metadata on its own does not touch the pixels. However, tools that clean a file by re-encoding it, including browser-based editors, apply JPEG compression again. At a high quality setting such as 90 the change is very difficult to see. To keep loss minimal, strip metadata once from your best original rather than repeatedly cleaning copies of copies.
Why did my photo turn sideways after removing EXIF?
Many cameras save pixels in a fixed orientation and rely on an EXIF Orientation tag to tell viewers how to rotate the image. If a tool removes that tag without rotating the pixels first, the photo appears sideways. Use a tool that applies the rotation before export, or correct it with rotate and flip controls so the orientation is written directly into the pixels.
Can an embedded thumbnail reveal a cropped part of a photo?
Yes, in some cases. EXIF often stores a small preview thumbnail, and not all editing programs regenerate it after cropping or retouching. The thumbnail may therefore still show the original, uncropped frame. Re-encoding the image from its pixels removes the old thumbnail entirely, which is why rebuilding the file is safer than deleting individual tags when sensitive content has been cropped out.
Conclusion
JPG metadata is useful to photographers and archivists, but it can disclose far more than most people intend when a file is shared. GPS coordinates, timestamps, serial numbers and forgotten thumbnails all travel silently with a photograph unless someone removes them, and sharing platforms are an inconsistent line of defence.
The dependable habit is simple: keep originals private, create a clean copy before sharing, check the result in a second program, and switch off location tagging when you do not need it. Those few seconds protect your home, your routines and the people in your pictures far more reliably than any platform's default behaviour.