EXIF Image Metadata Scrubber

What is EXIF metadata

EXIF (Exchangeable Image File Format) is a standard that specifies how metadata about a multimedia file can be embedded directly within the file itself rather than kept in a separate sidecar file.¹ The photos taken with most modern smartphones and digital cameras contain far more hidden data than most people realise: the GPS coordinates where the photo was taken, the make and model of the device, the precise time and date, and camera settings such as aperture, shutter speed, ISO, and focal length.²

What travels with the file

This metadata stays invisible when you view the image normally, but it travels with the file whenever you share, upload, or send it to someone else. Tools such as ExifTool let anyone who receives the image read and modify those hidden fields, which means the embedded data persists across every copy you hand over until you deliberately strip it out.³

GPS data privacy risk

GPS coordinates embedded in photos can be accurate to within a few metres, and most people never realise that a single snapshot can place them on a map with that level of precision.⁴ A photo taken at home and shared publicly reveals your home address, a photo taken at work reveals your workplace, and a series of photos taken over time can expose your daily routine in detail.

Why ordinary-looking photos still leak location

Location metadata is a privacy risk even when the image itself looks completely ordinary, because the coordinates sit silently alongside the picture data and travel with every copy. Photo-sharing platforms such as Flickr and Instagram have historically stripped some metadata on upload, but that behaviour is a platform choice rather than a guarantee, and it does not apply to file hosting services, messaging apps, or direct file transfers where the original file passes through untouched.

How the scrubber works

This tool operates at the binary level, reading the raw bytes of your image file and removing the metadata containers directly, all without ever re-encoding the image data. Because the picture pixels themselves are never decoded and recompressed, the visual content of your photo is completely unchanged and there is zero quality loss of any kind.

For JPEG files, metadata lives in application-specific marker segments before the image data.⁵ For PNG files, it lives in ancillary chunks.⁶ For WebP, it lives in chunks inside the RIFF container.⁷ The scrubber iterates through each container, splices out the unwanted segments, and reconstructs a fully valid image file, producing output that is bit-for-bit identical to the original except for the removed metadata sections.

A before-and-after comparison shows exactly what changes. A typical smartphone photo's metadata table lists GPS coordinates such as 40.7128° N, 74.0060° W, a camera model of iPhone 15 Pro, and a timestamp of 2026-03-14 09:22:11 before scrubbing. After scrubbing, the same table shows none of those three fields, only the image dimensions and file size the browser reads directly from the pixel data.

Supported formats

The current version of the scrubber supports JPEG, PNG, and WebP, the three formats that cover the vast majority of images people share from phones, cameras, and the web today. Each of these stores metadata in a different binary layout, so the scrubber uses a format-specific parser to locate and remove the right segments without disturbing the image data around them.

Why HEIC is not yet supported

HEIC and HEIF, the formats Apple devices default to for high-efficiency photo storage, are built on a more complex container structure that bundles image items, metadata, and thumbnails in a way the current parser does not yet handle.⁸ Adding reliable HEIC support requires a separate decoding path, so it is planned for a future version rather than shipped as a partial implementation that could leave metadata behind.

Camera fingerprinting beyond location data

GPS coordinates receive the most attention, but EXIF contains several other fields that can identify you even without a location.¹ The camera make and model fields identify your device type, while lens data such as focal length, aperture, and lens model can narrow the equipment used for a photo.³ For journalists protecting source anonymity, photographers working in sensitive contexts, or anyone sharing images consistently from one device, GPS is only one part of the metadata risk.

Serial numbers are not stored in standard EXIF for most consumer cameras, but unique noise patterns from the image sensor create a statistical fingerprint that correlates across photos from the same physical camera body.⁹ This analysis requires specialised software and is not visible in any EXIF viewer, but it is worth understanding that scrubbing EXIF removes the machine-readable metadata layer while the underlying image data may still carry sensor-level identifiers. For everyday privacy purposes, removing EXIF is the practical and effective step.

IPTC and XMP metadata containers

EXIF is one of several metadata containers in image files.¹⁰ IPTC (International Press Telecommunications Council) stores editorial metadata: caption, credit, copyright notice, keywords, and the creator's name and contact information.¹¹ Publishing workflows in news agencies and stock photo libraries write IPTC data automatically at export. XMP (Extensible Metadata Platform), developed by Adobe, stores a superset of both EXIF and IPTC fields in an XML format embedded inside the file.¹⁰ Adobe tools can write or update XMP metadata alongside the original EXIF segment. CapyToolkit's scrubber targets all three metadata containers, removing the EXIF, XMP, and IPTC segments from JPEG, PNG, and WebP files in a single pass so you are not left with partial metadata behind after stripping only the EXIF segment.