Loading page
About this tool
Maps each EXIF, GPS, IPTC and XMP field in a photo to the real-world privacy risk it creates, and scores the exposure.
This explainer maps every common photo metadata field — the EXIF tags in IFD0, the separate GPS IFD, IPTC blocks and Adobe XMP — to the specific thing it tells a stranger who downloads your picture. Tick the fields a file carries and it scores the exposure, flags combinations such as GPS coordinates beside a to-the-second capture time, and lists what to remove first. Nothing is uploaded: it is a reference model built from the Exif specification (CIPA DC-008), not a file scanner.
Open What Your Photo Metadata Reveals on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Each entry names the actual Exif tag, such as GPSLatitude 0x0002 or BodySerialNumber 0xA431.
Coordinates plus an exact timestamp are treated as worse than either field alone, because they are.
The same metadata scores higher on an anonymous account than in your own backup, and the tool reflects that.
Typically the capture date and time to the second, the UTC offset, the camera make, model and software version, exposure settings, and — if location services were on — latitude, longitude and altitude in a separate GPS IFD. Cameras can also store an owner name, a copyright string and a body serial number, and photo libraries may write tagged people's names into XMP.
Most large platforms strip most metadata from the copy they serve publicly, but this is a platform choice that changes without notice, it does not apply to files sent as attachments or through chat, and the original upload still reaches the platform's servers intact. Strip locally before uploading rather than relying on it.
Sometimes, yes. Some editors update the main image but leave the older embedded thumbnail in IFD1, so the pre-crop version travels with the file. Vendor MakerNote blocks can also survive light cleaning and may hold shutter counts, burst identifiers or face-detection data.
Deny the camera app location permission, or set it to never for that app in your phone's privacy settings. That stops the GPS IFD being written in the first place, which is more reliable than remembering to strip coordinates from each file before you share it.