Skip to content

image guide

EXIF Data Explained: The Hidden Metadata Inside Every Photo You Take

Every photo your phone takes carries a small report about itself: the exact time, the device, lens settings, sometimes the camera's orientation, and on most phones the GPS coordinates of where it was taken. That report is EXIF data, it is invisible in your gallery, and it travels with the file wherever you send it. This guide explains what the fields mean, how to read them, and the few situations where you should care enough to strip them.

Updated September 22, 2026 · 12 questions answered

Key takeaways

  • EXIF is metadata embedded in JPEG and HEIC files — timestamp, device, exposure settings, orientation, and on phones usually GPS coordinates.
  • A photo sent by messaging app or email attachment can reveal where your home, school or workplace is; phone cameras write location by default.
  • Most social platforms strip EXIF on upload; direct file sharing — email, cloud links, messaging 'document' mode — does not.
  • Viewing metadata needs no software: an in-browser EXIF reader shows every field without the photo ever leaving your device.
  • Stripping is simple and lossless to the pixels: re-encoding without metadata (a convert or compress pass) yields a clean file.

What EXIF Actually Is

Exchangeable Image File Format — a standard block of key-value pairs the camera writes into the file when it saves. In a JPEG it lives between the header and the image data; HEIC carries the same ideas in its own container. The fields fall into four groups, and knowing the groups covers almost every question anyone has about a photo's innards.

The camera report: make, model, lens, focal length, aperture, shutter speed, ISO, exposure compensation — the information that lets a photographer reverse-engineer someone's settings from a posted picture. The timeline: capture date and time, plus creation and modification stamps, often with sub-second precision and a timezone offset. The geometry: pixel dimensions, orientation flag (the field that makes phone photos rotate correctly in some apps and wrongly in others), and a thumbnail. And the location: GPS latitude, longitude, altitude, plus the bearing the camera was pointed — written whenever the phone had a fix when the shutter fired.

How to Read It (No Software Required)

Desktop: Windows shows a summary in a file's Properties → Details tab; macOS exposes the full set in Preview's inspector (Tools → Show Inspector → the EXIF camera tab). Both hide the GPS block unless you dig, which is itself a hint about how invisible this data usually is.

The complete picture needs a real reader — an online EXIF viewer parses every tag including the ones the OS summaries omit. On this site the reader runs entirely in your tab: it parses the file's header with JavaScript, so the photo (and its location data) never travels anywhere. That privacy property is unusual for a metadata tool and matters more than it sounds: you are about to inspect files that contain your home coordinates.

What to look for when it is your photo: the GPS block (latitude, longitude, altitude and direction — the full 'where and which way'), the exact capture datetime, and the device string. Those three are the fields with real-world consequence; the rest is camera trivia.

When Metadata Gets Shared (and When It Does Not)

The stripping news is genuinely good: Instagram, Facebook, X and most platform uploads remove EXIF entirely — the picture you see online carries no coordinates. Google Photos keeps location in its own database (that is the product) but strips it from downloaded originals unless you chose 'keep' on export.

The leaky paths are the direct ones: email attachments, cloud-drive links to the original file, messaging apps' 'document' or 'original' mode (WhatsApp photos compressed in image mode lose EXIF; sent as a document they keep it intact), and any website that lets you upload originals without processing — school portals, property listings, marketplace back-ends that store what you sent. The pattern: platforms that re-encode strip; pipes that store your file preserve.

The concrete risk is not surveillance thriller material, it is arithmetic: a photo of your kitchen tagged with GPS is your address; a photo of a car tagged at a station is a licence plate plus a location plus a timestamp. Metadata rarely leaks one thing; it leaks the join between things.

Stripping: When and How

Before posting a photo anywhere the original file will travel — a marketplace listing, a PDF you email, a file link in a chat — a strip pass is thirty seconds of hygiene. Two routes work: any re-encode that does not carry metadata forward (converting the photo with most browser tools produces a rebuilt file whose header is written fresh), or a dedicated scrub. On this site, running the photo through the compressor or a format converter yields a rebuilt file; verify with the EXIF viewer on the output, which is the only honest way to know a strip happened.

One professional reason to keep EXIF, so the guide is not one-sided: copyright and provenance workflows depend on capture data, some jurisdictions and stock platforms value it, and photographers routinely check a file's metadata to spot their own images scraped and reposted. The decision is per-audience: family and public get stripped files; your own archive keeps everything.

Prevention beats removal for phones that allow it: iOS Settings → Privacy → Location Services → Camera → Never writes no GPS at capture; Android's equivalent sits in the camera app's location-tagging toggle. Photos taken after that simply never carry the coordinates you would otherwise have to scrub.

The Orientation Trap and Other EXIF Curiosities

The most common EXIF-related bug people actually hit: a photo that looks upright on your phone and sideways on a website. The pixels are stored landscape; an orientation tag tells displayers to rotate. Apps that respect the tag show it right; servers that read pixels but ignore the tag bake it wrong. The fix when you are the one uploading: rotate-and-bake the orientation with the rotate tool, so the pixels match every viewer's assumption.

Curiosity tier, since once you can read EXIF you will read all of it: the thumbnail inside full-size files (a hidden 160 px preview, sometimes of the scene before you cropped), the sequence counter that reveals a burst's frame number, lens serial numbers on some systems, and the quiet DRM-adjacent fields — GPS being the one with consequences, and the reason this section exists at all.

Frequently asked questions

The questions people ask most about exif data: what your photos secretly carry (and how to read or strip it), answered directly.

What is EXIF data in a photo?

A block of metadata the camera or phone embeds inside the image file: capture time, device and lens, exposure settings, image orientation, and usually GPS coordinates on phones. It is part of the file itself, not a sidecar, which is why it travels silently wherever the photo goes.

Can a photo show my location?

Yes — if it carries GPS EXIF and reaches someone who can read it. Phone cameras write coordinates by default, and while social platforms strip the data on upload, email attachments, chat 'document' sends and drive links deliver the original file with the coordinates intact.

How do I view EXIF data of an image?

Quick summary: right-click → Properties → Details on Windows, or Preview's inspector on macOS. Full field-by-field view, including GPS: an online EXIF reader — on this site it parses the file in your own browser tab, so the photo never gets uploaded.

How do I remove location data from a photo?

Re-encode it without the metadata — most browser converters and compressors write fresh headers, producing a clean file — or use a dedicated scrub. Confirm by loading the output back into an EXIF viewer. For the future, turn off camera location on the phone and the problem stops at the source.

Does WhatsApp remove EXIF data?

Photos sent in normal image mode are recompressed and lose EXIF, including location. Sent as a document, the original file travels untouched with every field. Same logic applies to Messenger's HD modes and email: re-encoding strips, passthrough preserves.

Does Instagram delete EXIF data?

Yes — uploads are re-encoded and the metadata is dropped, which is part of why you cannot see a post's capture GPS even though the poster's phone wrote it. The stripped copy lives on their servers; the original on the poster's device keeps everything.

Are screenshots the same as photos for privacy?

Screenshots carry almost no EXIF — no GPS, no camera data — because there was no camera. They have their own tells, though: timestamps in the status bar, file-name patterns that encode device and time, and the resolution fingerprint of the model that took them.

Why do my photos appear sideways on some websites?

The phone stored landscape pixels plus an orientation tag; the site's uploader read the pixels and ignored the tag. Bake the rotation permanently with a rotate tool before uploading and every viewer agrees.

Can I see EXIF data on an image from a website?

Usually not much: what the site served is a re-encoded copy whose metadata was dropped in processing. The rare site that serves originals carries everything, which is how photo-sourcing work — and some journalism — is done.

Does converting HEIC to JPG keep the metadata?

Depends on the converter; many rebuild the file from pixels and drop the camera report — which doubles as a strip. Check either way: convert, then inspect the output with an EXIF viewer before you share it. The same check confirms whether the GPS survived.

Is it legal to remove EXIF data?

Removing metadata from your own photos is fine everywhere; it is your file. The legal trouble is the reverse — stripping copyright or creator info from someone else's images to pass them off as yours, which several jurisdictions treat as a violation of attribution law regardless of the copyright status of the picture.

Do privacy apps exist that strip photos automatically?

Some secure-messaging and camera apps never write GPS or auto-scrub on share. The practical version of the same protection is a habit rather than an app: originals get a strip pass before they leave the device, and a browser tool makes that a ten-second step.