How to Remove Metadata from a Photo Before You Share It

A photo is not just an image. It is an image plus a small file of facts about how and where it was taken, and most people have never looked at theirs.

The short answer

1. Open Privacy Scrub in PhotoTray.
2. Drop in a photo or a folder of them.
3. Look at what is in there first — it is read-only and it takes a second.
4. Remove the location, the camera details, or all of it.
5. Cleaned copies land where you choose; originals are untouched.

Start by looking

The step people skip is the inspection, and it is the one that changes behaviour.

Take a photo on your phone right now, copy it to your PC, and inspect it. You will almost certainly find a latitude and longitude accurate to a few metres, a timestamp to the second, your phone's exact model, and the orientation.

Reading that a photo "contains location data" is abstract. Seeing your own street written into a file you were about to email is not.

The three levels of removal

Location only. Removes the GPS block and leaves everything else. This is the right default for photos you are sharing. The coordinates are the part with a real cost; the date is genuinely useful and the camera settings are harmless.

Camera details. Removes the make, model, serial number, lens and exposure settings. Useful when the equipment itself is what you would rather not publish — because a serial number links two photos, and therefore two accounts, together.

Everything. Hands back a file that carries nothing but pixels. The right choice when you want no linkage at all, and the wrong choice for your personal archive, because the date goes with it.

Where metadata survives that people assume it does not

The mental model most people have is "the internet strips this". It is half true, and the half that is false is where the problems are.

Usually stripped: the large social networks re-encode uploads and drop EXIF as a side effect.

Usually kept: marketplace and classified listings, forums and imageboards, email attachments, messaging apps that send "as a file" rather than compressing, cloud file-sharing links, and anything you upload to a website that stores the original.

The second list is where photos of things you are selling — taken at home — end up.

Doing it in bulk, before you need to

The version of this that works is not per-photo diligence at the moment of sharing. It is a folder rule.

Point PhotoTray at whichever folder you share from and give it one instruction: strip the location from anything that arrives here. From then on, the photos in that folder are already clean at the moment you go to attach them — which is the moment you are least likely to be thinking about metadata.

That is the practical difference between knowing about this problem and not having it.

One limitation worth knowing

If your photos are HEIC files from an iPhone, there is something to be aware of.

Removing metadata works by rewriting the image without it. PhotoTray reads HEIC through Windows' own imaging component, but it cannot write HEIC. So a HEIC is scrubbed and saved as a JPG, or it is declined with an explanation — never returned unchanged with a success message.

That last behaviour is the genuinely dangerous one, and it is worth verifying in whatever tool you use. Check the file you get back: if it is still a HEIC and the tool claimed to have cleaned it, do not trust it.

What removal cannot do

Worth being clear about the limits, because metadata removal is sometimes treated as anonymity:

• The picture is still the picture. A recognisable house, a street sign, a reflection, or a view out of a window locates a photo perfectly well without any metadata at all.
• Your original still has everything. That is deliberate — cleaned copies are written separately so you do not destroy your own archive.
• The service you upload to knows things. Your account, your IP address and your upload time are theirs regardless of what is in the file.

Stripping metadata removes the easiest and most automatic disclosure. It is worth doing, and it is not a disguise.