Careers6 min readSeptember 25, 2026
Your CV and application photo leak more than you think
Recruiters receive hidden author names, company paths and device fingerprints with every application. What to clean before you hit send.
An application is a package of files: a CV, maybe a cover letter, often a photo. You carefully choose every word — and then send along a layer you never wrote: the metadata.
Two files, two kinds of leak
Fig. 01What travels with a typical application
Application photoJPEG / HEIC
GPSLatitudeMakeModelBodySerialNumberDateTimeOriginal
CV / cover letterDOCX / PDF
dc:creatorcp:lastModifiedByCompanycp:revision
Exported PDFfrom Word or LaTeX
ProducerCreatorCreationDate
A DOCX is a ZIP archive, and its properties are easy to read:
Fig. 02The hidden parts of your CV
Zlebenslauf.docx
- word/document.xmlvisible CV text
- docProps/core.xmlcreator, modified by, revision
- docProps/app.xmlcompany, manager, template
- docProps/custom.xmlcustom fields
Why it matters more than it seems
- The device fingerprint. A camera serial number is unique. It links your application photo to other photos you published elsewhere.
- The revision trail. A high revision count on a cover letter suggests it was heavily reworked — or reused from a template with a different name still inside.
- The internal path. Some templates keep your employer's name or project code in the metadata, even if the visible text says nothing.
- Automated screening. Applicant tracking systems parse files, and metadata is part of what they receive.
Clean before you apply
Fig. 03Pre-application checklist
- ✓Visible CV contenteverything the recruiter should readkeep
- ✓Accessibility tagshelpful for screen readerskeep
- ✕Author / last modified byyour name may be fine, the path is notstrip
- ✕Company and manager fieldsleaks your current employerstrip
- ✕Revision historyreveals editing roundsstrip
- ✕Photo GPS and device datahome coordinates and fingerprintstrip
How to clean an application
- Open the CV, cover letter and photo in ShredHub — all processing is local.
- Check the Identity, Software and Location groups.
- Clean with the standard preset and download the files.
- Re-scan each file to confirm a verified clean result, then send.
Takeaway
Recruiters judge the content, but they receive the file. Spend the extra minute to strip what you never intended to send — especially the location in your application photo.