Back to blog
Careers6 min readSeptember 25, 2026

Your CV and application photo leak more than you think

Recruiters receive hidden author names, company paths and device fingerprints with every application. What to clean before you hit send.

An application is a package of files: a CV, maybe a cover letter, often a photo. You carefully choose every word — and then send along a layer you never wrote: the metadata.

Two files, two kinds of leak

Fig. 01What travels with a typical application
Application photoJPEG / HEIC
GPSLatitudeMakeModelBodySerialNumberDateTimeOriginal
CV / cover letterDOCX / PDF
dc:creatorcp:lastModifiedByCompanycp:revision
Exported PDFfrom Word or LaTeX
ProducerCreatorCreationDate
The photo exposes your device and possibly your home; the documents expose your name, employer and internal file paths. Neither is visible when you review the application on screen.Exif (CIPA DC-008) and Office Open XML core properties (ECMA-376)

A DOCX is a ZIP archive, and its properties are easy to read:

Fig. 02The hidden parts of your CV
Zlebenslauf.docx
  • word/document.xmlvisible CV text
  • docProps/core.xmlcreator, modified by, revision
  • docProps/app.xmlcompany, manager, template
  • docProps/custom.xmlcustom fields
Three small XML files describe who made the document and how often it changed. A recruiter — or an automated system — can read them in milliseconds.Office Open XML packaging, ECMA-376

Why it matters more than it seems

  • The device fingerprint. A camera serial number is unique. It links your application photo to other photos you published elsewhere.
  • The revision trail. A high revision count on a cover letter suggests it was heavily reworked — or reused from a template with a different name still inside.
  • The internal path. Some templates keep your employer's name or project code in the metadata, even if the visible text says nothing.
  • Automated screening. Applicant tracking systems parse files, and metadata is part of what they receive.

Clean before you apply

Fig. 03Pre-application checklist
  • ✓Visible CV contenteverything the recruiter should readkeep
  • ✓Accessibility tagshelpful for screen readerskeep
  • ✕Author / last modified byyour name may be fine, the path is notstrip
  • ✕Company and manager fieldsleaks your current employerstrip
  • ✕Revision historyreveals editing roundsstrip
  • ✕Photo GPS and device datahome coordinates and fingerprintstrip
None of this changes a single visible character. It only removes the layer that was never meant to be read.

How to clean an application

  1. Open the CV, cover letter and photo in ShredHub — all processing is local.
  2. Check the Identity, Software and Location groups.
  3. Clean with the standard preset and download the files.
  4. Re-scan each file to confirm a verified clean result, then send.

Takeaway

Recruiters judge the content, but they receive the file. Spend the extra minute to strip what you never intended to send — especially the location in your application photo.