The Complete Image Privacy Toolkit: What to Strip Before Sharing

A photo carries more information than the pixels make obvious. Make a habit of running new photos through a quick sanitisation pass before sharing them publicly, especially photos taken at home, of children, of identifiable locations, or of documents. The whole pass takes under a minute, all in your browser.

The layers of information in a photo

When you publish a photo, you publish:

1. The pixels: what's visible to the eye.
2. The metadata: EXIF (camera, lens, exposure, GPS), IPTC (rights, captions), XMP (Adobe edit history). Often invisible until someone runs a tool.
3. Hidden subjects in the frame: reflections, backgrounds, screen content, identifiable signage.
4. The file itself: name, timestamp, modification history, software trail.

A "safe to share" photo has dealt with all four.

Layer 1: pixels

Look at the photo at 100% zoom. Walk through:

• Faces of people who didn't consent → blur or brush in Image Redactor.
• Identifiable backgrounds (your address number, a unique window view, a school name on a uniform) → black-bar or brush.
• Computer/phone screens with visible content → redact.
• Documents on the desk (mail, invoices, IDs) → redact.
• Reflections in glasses, mirrors, screens → check, then redact.

For each: black bar for short critical text (account numbers, PINs), brush for non-rectangular subjects (faces), blur for layout-preserving regions.

Layer 2: metadata

EXIF metadata is the biggest gap most people miss. A modern phone photo's EXIF often includes:

• GPS coordinates of where the photo was taken (accurate to 5–10 metres)
• Camera make and model (uniquely fingerprints your device across photos)
• Capture timestamp (exact second)
• Software/firmware versions (rare but exists)
• Lens focal length and aperture (sometimes reveals professional gear)
• Owner / copyright (some cameras have this baked in)

Strip it all with EXIF Remover. The tool reads what's in the file, shows you exactly what would be removed, and produces a byte-identical pixel output minus the metadata.

For PDFs, the equivalent is the PDF Metadata Remover. It strips author, title, creator, modification dates, and the document XMP block.

Layer 3: optional attribution

If the photo is yours and you want it credited when it spreads:

• Add a watermark with your handle, domain, or copyright mark.
• 30–60% opacity, bottom-right, small. See Watermark Position Guide.

Skip the watermark for casual sharing; add one for portfolio shots, brand campaigns, and stock previews.

Layer 4: file hygiene

Rename the file before uploading anywhere. Default phone filenames (IMG_4521.HEIC, Screenshot 2026-08-15 at 3.42.18 PM.png) sometimes encode the device's storage state or a timestamp you didn't intend to share.

A neutral name like photo.jpg or screenshot.png is enough.

The end-to-end workflow

For a photo about to go public:

1. Pixel redaction      → Image Redactor
2. Metadata removal     → EXIF Remover
3. Optional watermark   → Image Watermarker
4. Web compression      → Image Compressor
5. Rename file          → manually
6. Upload

Total time: under a minute for a single photo, longer for batches. All tools run in your browser. Open DevTools Network and filter Fetch/XHR to verify the photo never leaves the tab.

When to do this

Always for:

• Photos of children
• Photos taken at home
• Photos of documents
• Screenshots containing any non-public info
• Stock photo submissions

Usually for:

• Photos taken on vacation (location)
• Photos with people other than yourself
• Professional portfolio shots (watermark + EXIF strip)

Optionally for:

• Public-place landscape photos with no identifiable subjects
• Photos already public elsewhere

The privacy posture

The point isn't paranoia, it's the same posture as locking your front door. Most days nothing happens. The cost of locking is small. The cost of the rare bad day when you didn't is large.

Image Privacy Toolkit, browser-only: EXIF Remover · Image Redactor · Image Watermarker · PDF Metadata Remover · Image Compressor.