The Invisible Memory of Your Photos
Understanding and removing EXIF metadata from JPEG and WebP without quality loss
You take a photo and share it. On social media, in an email to a friend, or on a blog post like this one. What the recipient gets is more than the millions of pixels that make up the visible image. Delivered alongside it are so-called metadata: information about the device, the location where the photo was taken, the date, and possibly your name. All of it is invisibly embedded in the file format and goes by the name EXIF.
What is EXIF data?
EXIF stands for Exchangeable Image File Format. The standard was developed in 1995 by the Japan Electronic Industries Development Association and has been a fixed part of nearly every digital camera and smartphone ever since. It defines which metadata the recording device automatically writes into the image file at the moment of capture.
In JPEG files this happens in a dedicated area at the beginning of the file called the APP1 segment. That area is structurally separate from the actual image data. It is invisible to the human eye but fully readable by anyone who receives the file.
What does EXIF data reveal?
The range of information that can be stored is considerable. GPS coordinates pinpoint the exact location of the shot down to a few metres. Camera model and manufacturer, serial number, the software used. Date and time of capture. Camera settings such as aperture, shutter speed, focal length and ISO value. Author details including the photographer's name, a copyright notice and an image description. And an embedded thumbnail that sits independently inside the file package.
Anyone who shares an unedited photo shares all of that, whether intentionally or not. And anyone who edits JPEGs may also end up distributing information added by the editing software.
When does this become a problem?
The most sensitive piece of information is the GPS coordinates. A photo uploaded to social media can reveal an exact home address, a workplace or regularly visited locations. Photographers, activists, journalists or simply people who do not want their address made public can inadvertently expose sensitive data with a single careless share.
Camera model and serial number make it possible to identify devices and link different photos back to the same person. Timestamps allow conclusions to be drawn about daily routines and habits. If a camera was registered with a name, the author fields broadcast that name to the public. The embedded thumbnail can in some cases contain an older version of the image where areas that were later obscured in the main image are still visible in the preview.
The most common misconception is that the platform takes care of it. Some social networks strip metadata on upload. Others do not. Cloud storage services vary. Some do it only for certain upload paths or file formats. There are no guarantees, and anyone who does not act themselves hands over control.
WebP and another blind spot
WebP is a more modern image format from Google and is now widely used. What many people do not know is that WebP files can also carry metadata.
The format has three internal variants. VP8 and VP8L are the straightforward ones since they contain no metadata at all. Images in these variants are clean from a privacy standpoint.
VP8X is the extended variant. It allows additional data blocks inside the file container, including an EXIF block structured identically to the one in JPEG files. There is also XMP, a separate XML-based metadata format that can store information about the author, rights and editing history. Both can be present independently of each other and both can contain critical data such as GPS coordinates or author details. XMP is not exclusive to WebP. JPEG files can also carry their own XMP block alongside the EXIF block, embedded in a separate segment.
A VP8X image with EXIF and XMP looks exactly like any other photo. The metadata sits hidden inside the file structure and no ordinary image viewer surfaces it by default.
How to remove EXIF data properly
The obvious approach is to re-save the image in a different format or with different settings. The downside is that the image has to be re-encoded, which means a potential loss of quality.
The clean method works differently. EXIF data in a JPEG sits in a clearly separated segment at the beginning of the file. That segment can be cut out without touching the rest of the file. The image data itself remains completely unchanged. This is called a lossless strip.
The same applies to WebP. Metadata blocks in VP8X files are self-contained chunks inside the RIFF container. They can be removed without re-encoding the image by extracting only the relevant chunk and cleanly reassembling the file format around it.
Do you really need expensive or complicated image editing software for this?
That is exactly what the industry and the makers of such software want you to believe. But there is a simpler way, and it runs in your browser without needing to be online.
Allow me to introduce the EXIF Editor. After loading a JPEG or WebP file the tool analyses the file structure. VP8 and VP8L files are immediately reported as clean. VP8X files with an EXIF block or XMP are detected and evaluated. The tool shows what information is present, GPS, camera, date, author, and removes everything in one click via a lossless binary strip. EXIF and XMP are removed simultaneously. If XMP data is present, it can also be downloaded as an XML file from the view tab so you can inspect the exact contents before removing them.
Anyone who wants to edit specific fields rather than delete them can do that too. Adjust timestamps, remove GPS data, set or clear author details. All without re-encoding the image.
The tool is available as an offline version. Simply download a static HTML page from the tool builder and use it without an internet connection.
Metadata in photos is not a theoretical risk. It is present in every file and readable by anyone who receives it. Removing it takes seconds and leaves the image quality completely untouched.
Anyone interested in hiding data inside PNG images will find the counterpart to this tool in the Stegofile Concealer.
Peace Out Alexander
