A JPEG photo is more than the picture. It can carry where and when it was taken, the exact device, its editing history, a thumbnail of the uncropped original, and sometimes a whole video clip. Here is what is in there and how to see it.
Open a photo and you see a picture. Open the same file in a metadata viewer and you can often find the date and time to the second, the GPS coordinates, the make and model of the phone, the lens, the exposure settings and the software used to edit it. Sometimes there is also a small copy of the image from before it was cropped, the names of people tagged in it, or a video clip.
None of this is hidden in a sinister sense. Most of it is there because it is useful: your phone uses it to sort photos by date and place, and editors use it to keep colours accurate. The trouble starts when a photo leaves your hands and carries all of it along.
See what your own photo contains: drop it into our EXIF Remover. It reads the file in your browser, shows the GPS position, camera, lens, date and software, and gives you a cleaned copy without changing a single pixel.
How a JPEG file is put together
A JPEG is a sequence of labelled segments. Only a few of them hold the picture: the quantisation and Huffman tables and the compressed image data. Everything else is optional, and that is where the extra information lives. In the order you normally find them:
| Segment | What it holds | Privacy risk |
|---|---|---|
| APP1 · EXIF | Camera data, date and time, GPS, a thumbnail | High |
| APP1 · XMP | Editing history, ratings, keywords, face tags | Medium to high |
| APP13 · IPTC | Caption, creator, copyright, place names | Medium |
| APP2 · ICC profile | Colour profile for accurate display | Low |
| APP2 · MPF | Index of extra images stored in the file | Depends on the images |
| APP11 · JUMBF | Content Credentials (C2PA): where the image came from and how it was edited | Medium |
| COM | Free-text comment | Usually low |
| After the image | Appended data: motion-photo videos, depth maps, HDR gain maps | Medium to high |
EXIF: what the camera writes
EXIF is the big one. Phones and cameras fill it in automatically every time you take a picture.
Location
If location was enabled, the GPS section records latitude and longitude, often good to within a few metres, plus the altitude. Many phones also record the compass direction the camera was facing, the speed you were moving, the GPS time and an estimate of the position’s accuracy. Together they do not just say which street you were on. They can say which window you were standing at.
Time
The date and time the photo was taken, usually to the second and often with sub-second precision and a time-zone offset. Separate fields record when the file was digitised and last modified. Even without GPS, a series of timestamped photos is a timeline of your day.
Device
Make and model (“Apple iPhone 16 Pro”, “Canon EOS R6”), the lens, and on many cameras the body serial number and lens serial number. A serial number links every photo you have ever published from that camera, across accounts and websites. Some cameras let you enter an owner name or copyright line, which is then stamped into every shot.
Settings and software
Shutter speed, aperture, ISO, focal length, flash, white balance, and the name and version of the software that last saved the file. Mostly harmless, but the software field can reveal that a photo was edited, and with what.
Maker notes
Manufacturers have their own section, the MakerNote, in a private format. Depending on the brand it can include the shutter count, internal serial numbers, focus points and other details. Many general tools cannot read it, but it is still in the file.
The thumbnail
EXIF usually includes a small preview image, around 160 × 120 pixels, so file browsers can show a thumbnail quickly. Some editing software crops or retouches the main image without updating that preview. In a widely reported case from 2003, a TV presenter’s cropped photos were found to contain thumbnails of the uncropped originals. Modern software is better at this, but not all of it.
XMP: what editing software writes
XMP is a block of XML that programs like Photoshop, Lightroom and many phone gallery apps use to record extra information:
- Editing history: a list of the actions applied, and document IDs that can link an edited file back to its original.
- Develop settings from raw editors, ratings, colour labels and keywords.
- Face regions: some photo managers that recognise faces store the rectangles and the names of the people you tagged.
- Phone camera features: flags for portrait mode, motion photos, depth maps and HDR.
IPTC: captions and credits
IPTC fields were designed for news photography: a caption, a headline, the photographer’s name, a copyright notice, contact details, keywords, and the city, region and country. Photographers often fill them in on purpose. The risk is forgetting they are there, for example a contact email address in a photo you meant to post anonymously.
Extra images and video inside the file
Modern phones often store more than one image in a single JPEG:
- Motion photos. Pixel and Samsung phones can record a second or two of video around each shot and append it to the end of the JPEG. Most apps show only the still, but the video is still in the file, along with its own sound and metadata.
- Depth maps from portrait mode, which let an app change the blur later.
- HDR gain maps (Ultra HDR), which let compatible screens show brighter highlights.
- Larger previews, indexed by an MPF segment.
These sit after the end of the main image, so a viewer that only shows the picture gives no hint they exist. Removing them makes the file smaller. The still photo looks the same, but it loses the motion clip and the extra HDR brightness on screens that support it.
Content Credentials
A growing number of cameras, phones, editing apps and AI image generators add Content Credentials (the C2PA standard). They are a signed record of where the image came from and what was done to it, intended to help people tell real photos from manipulated or generated ones. They can include the device, the software and, if the creator chose, their name. Stripping metadata removes them too, so a photo that carried proof of authenticity no longer does.
How to see everything in a photo
- Quick check: the EXIF Remover shows the fields that matter most: GPS position, camera, lens, date, software and orientation.
- On your computer: Windows shows many EXIF fields under Properties › Details. On a Mac, Preview’s Tools › Show Inspector does the same.
- Everything, including maker notes: the free command-line program ExifTool lists every tag it recognises:
exiftool -a -G1 photo.jpgHow to remove it
For most people, remove all of it before sharing a photo with anyone you do not know. The only thing worth keeping is the colour profile, which makes colours display correctly and says nothing about you.
- In your browser: the EXIF Remover deletes EXIF, XMP, IPTC, Content Credentials, comments and any data after the image. It keeps the colour profile, and the image data is copied byte for byte. If a photo relies on the EXIF rotation tag to display upright, it rotates the pixels for you and says so; that is the only case where the image is re-encoded.
- With ExifTool, to remove everything except the colour profile:
or to remove only the location:exiftool -all= --icc_profile:all photo.jpg
ExifTool keeps a backup of the original namedexiftool -gps:all= photo.jpgphoto.jpg_original. Delete it if the point was to get rid of the data. Removing everything also removes the rotation tag, so a photo that relied on it may then display sideways. - Location only, on your phone: see our step-by-step guide to removing the location from a photo on iPhone, Android, Windows and Mac.
Metadata is only part of the story. A clean file can still give you away through what is in the picture: a street sign, a reflection, a uniform, a document on the desk. Look at the image itself before you post it.
Frequently asked questions
Is EXIF data the same as metadata?
EXIF is the most common kind of photo metadata, written by the camera. A JPEG can also carry XMP (often written by editing software), IPTC (captions and copyright, used by photographers and newsrooms), an ICC colour profile, comments and data appended after the image.
Can someone find my location from a photo I sent?
If the photo was taken with location enabled and it reached them as the original file, yes, by reading the GPS fields. Messaging apps that recompress photos usually remove it; email attachments, file transfers and cloud links usually do not.
Does removing metadata reduce photo quality?
It does not have to. Metadata is stored in separate segments next to the image data, so it can be removed without touching the pixels. Tools that instead open and re-save the photo do lose a little quality each time.
Can a photo be traced to my camera without metadata?
Possibly. Every camera sensor leaves a faint, unique noise pattern in its images, and forensic analysts can sometimes match a photo to a specific camera using it. That is specialist work, not something a casual viewer can do, but removing metadata is not perfect anonymity.