What a photo really reveals about you
GPS position, camera serial number, software history — a tour through the metadata of a typical smartphone photo.
A photo is never just pixels. Every time you press the shutter, your camera or phone writes a second layer into the file: metadata. It records where you were, which device you used and how the image was edited — and sometimes considerably more.
The layers inside a photo
Most photos from phones and cameras are JPEG files with several metadata blocks:
- EXIF — the technical heart. Camera make and model, lens, exposure settings, timestamps, orientation, and often a GPS position with altitude.
- XMP — an XML-based format used by editors such as Lightroom or Photoshop. It stores editing history, ratings, keywords and sometimes a copy of the GPS coordinates.
- IPTC — classic press metadata: byline, copyright notice, captions, city and country.
- Embedded thumbnails — small previews that can survive heavy editing and still show the original scene.
Why it matters
Three examples from everyday life:
- You sell something online. A photo of your sofa, taken in your living room, contains the coordinates of your home. The buyer now knows your address before you ever meet.
- You apply for a job. The CV photo contains a camera serial number. It is a unique device fingerprint that can be linked to other photos you published elsewhere.
- You post a photo "from the office". The metadata shows a different location, a different time, and editing software that the original never had.
None of this is visible in the image itself. You only see it when you look at the metadata.
What a typical report looks like
When ShredHub analyzes a photo, it groups the findings by risk:
- Location — latitude, longitude, altitude, city names.
- Device & hardware — make, model, lens, serial numbers.
- Identity & authorship — artist, creator, owner, last modified by.
- Software & edit history — editing tools, version numbers, revision counts.
- Timestamps — capture, digitization and modification dates.
- Embedded data — thumbnails, previews, sometimes trailing bytes after the end of the file.
Each field gets a risk rating, and the overall score tells you how exposed the file is.
How to check your own photos
- Open the file in ShredHub (it runs entirely in your browser — nothing is uploaded).
- Read the report. If there is no location or identity group, you are already in good shape.
- Use the standard cleaning preset to remove identifying fields, or minimal if you only want to remove the GPS position and keep the camera details.
- Download the cleaned file and scan it again — ShredHub re-analyzes the result and shows a verified clean badge when the metadata is gone.
The takeaway
Metadata is not inherently bad. It is what makes photo libraries searchable and helps photographers prove authorship. The problem starts when files are passed to third parties without you knowing which data they carry. Checking takes seconds.