What is photo metadata? A plain-English guide to EXIF, GPS, XMP and IPTC

Every digital photo carries information you can't see in the picture. Here's what that information is, where it comes from, and when you should get rid of it.

Definition

Photo metadata is information stored inside an image file that describes the photo rather than showing it. It typically includes the camera or phone model, the date and time the photo was taken, camera settings, the software used, and often the GPS coordinates of where it was taken. The most common formats are EXIF, XMP and IPTC.

Photo metadata, defined

Think of a photo file as an envelope. The picture is the letter inside. Metadata is everything written on the envelope: who sent it, when, from where and with what. Your photo app reads the envelope to sort photos by date or show them on a map. Most people never look at it directly.

Metadata is written automatically. The moment you press the shutter, your camera or phone records dozens of details alongside the image. Editing apps add more, social media tools sometimes add their own, and very little of it is ever removed unless someone makes a point of doing so. That's why a photo can carry its full history long after it's been forwarded, downloaded and re-shared.

The main types of photo metadata

"Metadata" is an umbrella term. Inside a typical photo you'll find several separate systems, each created for a different purpose.

EXIF data

EXIF stands for Exchangeable Image File Format. It was first published in 1995 by the Japan Electronic Industry Development Association and is now maintained by the camera industry body CIPA together with JEITA. EXIF is written by the device that takes the photo, so it's the most technical layer: camera make and model, lens, shutter speed, aperture, ISO, flash, the date and time, and the image orientation. When people say "EXIF data", they usually mean all of this, plus GPS.

GPS location data

GPS coordinates are stored inside EXIF, in a section of their own. A phone with location access for the camera saves latitude and longitude for every shot, and often altitude, the compass direction the lens was pointing, and a satellite timestamp. Modern phones combine GPS, Wi-Fi and cell signals, so outdoors the position is often accurate to within a few meters. This is the part of photo metadata that matters most for privacy.

XMP metadata

XMP (Extensible Metadata Platform) was introduced by Adobe in 2001 and later became the ISO 16684-1 standard. It's written as XML text, which makes it flexible. Editing apps use XMP to store edit history, ratings, keywords, the creator's name and copyright notice. Phones use it too: Google's camera stores motion photo and depth information in XMP, and Apple stores some capture details there.

IPTC metadata

IPTC metadata comes from the International Press Telecommunications Council, a body set up by news organizations. It was designed so that photographers and agencies could attach captions, credits, copyright, keywords and location names to news images. Today it's widely used by stock photo sites and professional photographers. Google Images can display IPTC credit and copyright fields next to an image.

Maker notes

Camera manufacturers reserve a private area inside EXIF called the maker note. Its contents aren't standardized and are often undocumented, but they can include detailed shooting data, focus points, internal serial numbers and shutter counts. Because it's opaque, the safest approach is to remove it completely, which KitFuse does.

Embedded thumbnails and previews

Many JPEG files contain a small preview image inside the EXIF block, and some contain larger previews or even a short video. Motion photos from Android phones, for example, store a video clip after the end of the main image. Here's the catch: some editing tools crop the main image but leave the old thumbnail untouched, so a cropped-out detail can survive in the preview.

PNG text and AI generation data

PNG files can hold text chunks with any label, such as Author, Description or Software. Image generators often write their full prompt and settings into a PNG chunk called parameters or prompt. If you share an AI image, you may also be sharing exactly how you made it. Since 2017, PNG can also hold a standard EXIF block in a chunk called eXIf.

Color profiles

An ICC color profile describes how the colors in the file should be displayed. It's technical rather than personal, with a name like "sRGB" or "Display P3". KitFuse keeps it by default because removing it can noticeably change colors.

Content Credentials (C2PA)

A newer kind of metadata, Content Credentials follow the C2PA standard and record where an image came from and how it was edited, with a digital signature. Some newer cameras, phones and AI tools add them. They're designed to fight misinformation, and they can also identify the device or person behind an image. Removing them is a judgment call: it protects privacy but also removes proof of origin.

What a typical smartphone photo reveals

To make this concrete, here's the kind of information a photo straight from a modern phone usually contains. The values below are illustrative, but every field is real and common.

FieldExample valueWhat it tells someone
Make and modelApple iPhone 15 ProWhich device you own
Date taken12 Apr 2026, 18:30:12, UTC+02:00When you were there, and your time zone
GPS coordinates48.85837, 2.29448Where you stood, to within a few meters
GPS altitude35.2 m above sea levelHeight, which can hint at a floor or hillside
Image direction312°Which way you were facing
LensBack triple camera 6.86 mm f/1.78Which camera module was used
Software17.4.1Your operating system version
Exposure1/120 s · f/1.8 · ISO 64Lighting conditions at the time

On its own, any one of these is minor. Together, and across several photos, they can show where someone lives, works and spends their weekends.

Why photos have metadata in the first place

Metadata isn't a conspiracy. It exists because it's genuinely useful:

  • Your gallery app uses dates to sort photos and GPS to build maps and travel albums.
  • Photographers use exposure data to learn what worked and what didn't.
  • Newsrooms and stock agencies rely on captions, credits and copyright to license images correctly.
  • Courts, insurers and researchers use timestamps and device details as evidence.
  • Orientation and color data make sure photos display correctly on every screen.

The problem isn't that metadata exists. It's that it travels with the file to people it was never meant for.

Is photo metadata a privacy risk?

Sometimes, yes. The risk depends on what's in the file and who receives it. GPS coordinates are the biggest concern, because a single photo taken at home can reveal your address. Serial numbers can link photos from the same camera across different accounts. Timestamps reveal routines. Author and contact fields can put your name on a photo you meant to share anonymously.

We cover real cases and practical risk levels in Is EXIF data dangerous?

How metadata travels: what keeps it and what strips it

Whether metadata reaches the other person depends on how the photo is sent. As a rule of thumb:

  • Usually kept: email attachments, cloud storage links, AirDrop and file transfer, messaging apps when you send a photo "as a file" or "document", USB transfers, and many forums and personal websites.
  • Often removed from the public copy: major social networks such as Facebook, Instagram and X re-process uploaded photos and drop most EXIF data, including GPS, from the version other people see.

Even when a platform strips metadata from the public copy, it may still read it first. Policies change without notice, so the only reliable approach is to clean photos yourself before they leave your device. Our article on metadata and social media goes platform by platform.

How to view photo metadata

Every major operating system can show at least some metadata:

  • iPhone: open the photo in Photos and swipe up, or tap the info button. A map appears if location is stored.
  • Android: in Google Photos, open the photo and swipe up to see details and location.
  • Windows: right-click the file, choose Properties, then the Details tab.
  • Mac: open the photo in Preview, choose Tools › Show Inspector, then the More Info tab, where you'll find EXIF and, if present, GPS details.

Built-in viewers show only the common fields. To see everything, including XMP, IPTC and embedded extras, add the photo to KitFuse: it lists what it finds before changing anything. For a fuller walkthrough, read how to check if a photo has GPS data.

How to remove metadata from a photo

The quickest way to remove metadata from a photo is to run it through a dedicated cleaner. With KitFuse, you add the photo, press Clean metadata and download the result. JPG, PNG and WebP files are cleaned without any loss of quality, and nothing is uploaded. Operating systems offer partial options too, such as the Remove Properties and Personal Information link in Windows or the location toggle in the iPhone share sheet, but these usually leave XMP and IPTC data behind.

Remove metadata from a photo now

Photo metadata glossary

EXIF
Exchangeable Image File Format. The standard technical metadata written by cameras and phones.
GPS tags
The part of EXIF that stores latitude, longitude, altitude, direction and satellite time.
Geotagging
Adding location data to a photo, either automatically by the camera or later in an app.
XMP
Extensible Metadata Platform. An XML-based format used by editing apps and phones for descriptive data and edit history.
IPTC
A metadata standard from the news industry for captions, credits, copyright and keywords.
Maker note
A private, manufacturer-specific section of EXIF that can contain serial numbers and other hidden details.
ICC profile
A color profile that tells displays how to show the colors in an image.
Lossless cleaning
Removing metadata without re-compressing the image, so the picture is identical to the original.