Digital Privacy Guide: Hidden Metadata in Your Files

What is File Metadata?

Metadata is "data about data" - information embedded in files that describes their properties, origin, and history. While the visible content is what you see, metadata operates invisibly in the background.

Types of Metadata

Image Metadata (EXIF)

EXIF (Exchangeable Image File Format) data is embedded in photos by cameras and smartphones. It can contain over 100 different fields of information.

Common EXIF Fields

What Your Phone Captures

Modern smartphones record extensive metadata:

• Precise GPS coordinates (within meters of your location)
• Exact timestamp (date, time, timezone)
• Device information (phone model, sometimes IMEI)
• Camera settings used for the photo
• Orientation (how you held the phone)
• Altitude (floor of building in some cases)

EXIF in Different Formats

PDF Metadata

PDFs carry extensive metadata that can reveal information about the document's creation and history.

Standard PDF Metadata

• Title: Document title (often defaults to filename)
• Author: Name of creator (often your computer username)
• Subject: Document subject
• Keywords: Searchable tags
• Creator: Application used to create the original
• Producer: Application that converted to PDF
• Creation Date: When PDF was created
• Modification Date: Last edit timestamp

Hidden PDF Data

Beyond standard metadata, PDFs may contain:

• Embedded files: Attachments, previous versions
• Comments and annotations: Review notes, sticky notes
• Form field data: Previously entered form values
• JavaScript: Embedded scripts
• Bookmarks: Document navigation structure
• XMP metadata: Extended metadata in XML format
• Custom properties: Application-specific data

Document Metadata

Word documents, spreadsheets, and presentations contain rich metadata and revision history.

Microsoft Office Metadata

• Author: Original creator name
• Last Modified By: Most recent editor
• Company: Organization name
• Manager: Manager's name
• Total Editing Time: Time spent editing
• Revision Number: Edit count
• Template: Base template used
• Comments: All comments, even deleted ones
• Track Changes: Full revision history
• Hidden Text: Marked as hidden but still present

Revision History Risks

What you think you deleted might still be there:
- Track changes history shows all edits
- Comments may reveal confidential discussions
- Previous versions can be recovered
- "Accept All Changes" doesn't remove history
- Hidden rows/columns in spreadsheets
- Deleted slides may remain in file

Other Document Formats

Privacy Risks

Real-World Incidents

1. Location Tracking

Celebrities and public figures have been tracked by analyzing GPS data in photos posted to social media. Stalkers have used this information to locate victims' homes, workplaces, and daily routines.

2. Whistleblower Identification

Documents leaked to journalists have contained metadata revealing the source's identity, organizational department, or the specific printer used - leading to identification and prosecution.

3. Legal Discovery

In lawsuits, metadata has revealed that documents were backdated, that "original" files were actually copies, or that claimed authors didn't actually create the documents.

4. Business Intelligence

Competitors have analyzed proposal PDFs to learn about internal processes, organizational structure (from author names), and software systems in use.

Risk Assessment

Removing Metadata

Image Metadata Removal

Windows

1. Right-click image → Properties
2. Go to "Details" tab
3. Click "Remove Properties and Personal Information"
4. Choose "Create a copy with all possible properties removed"
   or "Remove the following properties from this file"

macOS

# Using ImageOptim (free app)
1. Drag images to ImageOptim
2. Enable "Remove EXIF data" in preferences

# Using command line (requires ExifTool)
exiftool -all= image.jpg

Command Line (ExifTool)

# Install ExifTool
# macOS: brew install exiftool
# Linux: sudo apt install exiftool
# Windows: Download from exiftool.org

# Remove all metadata from single image
exiftool -all= photo.jpg

# Remove all metadata from directory
exiftool -all= /path/to/photos/

# Remove only GPS data
exiftool -gps:all= photo.jpg

# Keep some metadata, remove rest
exiftool -all= -tagsFromFile @ -ColorSpaceTags photo.jpg

# View all metadata first
exiftool -a -u -g1 photo.jpg

PDF Metadata Removal

Using Ghostscript

# Remove metadata and optimize
gs -dBATCH -dNOPAUSE -sDEVICE=pdfwrite \
   -dCompatibilityLevel=1.4 \
   -sOutputFile=clean.pdf original.pdf

Using qpdf

# Linearize and remove metadata
qpdf --linearize --replace-input input.pdf

Office Document Cleanup

Microsoft Word

1. File → Info
2. Click "Check for Issues"
3. Select "Inspect Document"
4. Check all categories
5. Click "Inspect"
6. Click "Remove All" for each category

Save as Different Format

Saving as PDF (without metadata) or plain text removes most document-specific metadata, though some may persist.

Face and Identity Redaction

Beyond metadata, the visual content of images may need redaction to protect privacy.

What to Redact

• Faces: Identifiable people who haven't consented
• License plates: Vehicle identification
• Address numbers: Building identification
• ID cards/badges: Personal identification
• Screens: Visible computer/phone screens
• Signatures: Handwritten signatures
• Medical information: Prescriptions, charts
• Financial data: Bank statements, card numbers

Proper Redaction Techniques

Correct Redaction:
- Blur or pixelate (irreversible at sufficient level)
- Solid color overlay with flattening
- Remove entire portion of image
- Re-render as new image (not overlay)

Incorrect Redaction:
- Black box overlay (may be removable)
- Transparent overlay (can be deleted)
- PDF highlight tool (text still selectable)
- Low-level blur (can be enhanced/reversed)

Blur Guidelines

Privacy Best Practices

Before Sharing Files

1. Check metadata before sharing any file publicly
2. Use privacy tools to strip metadata from images
3. Inspect PDFs for hidden content and metadata
4. Review document properties in Office files
5. Consider screenshotting instead of sharing originals
6. Test your redactions by trying to recover data

Device Settings

Disable Location in Photos

iPhone:
Settings → Privacy → Location Services → Camera → Never

Android:
Camera app → Settings → Location tags → Off

Windows:
Settings → Privacy → Location → Camera → Off

Platform-Specific Notes

Even when platforms strip metadata from displayed images, they may retain it in their systems.

Workflow Recommendations

1. Create a "sanitization" folder for files to share
2. Run metadata removal tools before moving to share folder
3. Verify removal by checking properties
4. For documents, save as PDF with metadata stripped
5. For images, use PNG (after EXIF removal) or screenshot

Privacy Tools

Use these browser-based tools to inspect and clean your files privately - all processing happens locally in your browser.