Do photos taken on an iPhone or Android phone contain my exact home address?

Yes, if camera Location Services are enabled. Smartphone HEIC and JPEG files embed EXIF GPS tags including latitude, longitude (accurate to within 3–5 meters), altitude, compass direction, and the exact millisecond timestamp. While social networks like X and Instagram strip EXIF data on public timelines, sending a photo as an email attachment, ZIP archive, or direct file transfer preserves all embedded GPS coordinates unless you strip them first.

Does converting an image in the browser remove EXIF metadata?

When an image is decoded onto an HTML5 Canvas or re-encoded into a fresh PNG, WebP, or JPEG without copying EXIF/IPTC/XMP headers, only the raw RGB/RGBA pixel matrix is written to the new file—effectively stripping camera GPS coordinates, lens serial numbers, and thumbnail previews.

What hidden metadata is stored inside a Microsoft Word (.docx) or PDF file?

A .docx file isactually a ZIP archive containing XML files. Its docProps/core.xml and app.xml files record the original author's full name, the username of the last person to save it, total editing time in minutes, company name, template path, and—if Track Changes was used without accepting revisions—every deleted sentence and comment.

Hidden File Metadata & EXIF Privacy: What Your Files Leak Before You Share Them

Every photo, PDF, and Office document carries invisible headers that can reveal your GPS coordinates, computer username, edit history, and uncropped originals. Here is how to inspect and sanitize them.

Last reviewed: 2026-11-03

Encrypting a file in transit protects it from network eavesdroppers, but it does nothing to protect you from what is hidden inside the file itself, which the intended recipient can inspect the moment they open it. Journalists, whistleblowers, remote workers, and everyday sellers on classified marketplaces routinely leak their home GPS coordinates, internal corporate usernames, or "deleted" contract clauses because modern file formats silently log forensic metadata.

Below is a technical breakdown of what is embedded inside images, PDFs, and Office documents, why common "redaction" habits fail, and how to strip metadata cleanly before transferring a file.

1. Image Metadata: EXIF, IPTC, XMP & Embedded Thumbnails

When you snap a photo on an iPhone (.HEIC / .JPG), Android phone, or mirrorless camera, the image file stores far more than visible pixels. Inside the file header sit three metadata standards—EXIF (Exchangeable Image File Format), IPTC, and Adobe XMP:

High-Precision GPS Coordinates: Tags GPSLatitude, GPSLongitude, GPSAltitude, and GPSImgDirection record exactly where you were standing (down to ~3 meters) and which direction the lens was pointing.
Device Fingerprinting: Tags Make, Model, BodySerialNumber, LensSerialNumber, and Software allow anyone to link two anonymous photos to the exact same physical camera or OS build.
The "Original Thumbnail" Trap (EXIF IFD1): Most cameras embed a small 160×120 px JPEG preview inside the EXIF header so file managers can render icons quickly. If you crop a sensitive detail out of the edge of a photo using a poorly written image editor that updates the main image but forgets to regenerate the EXIF thumbnail, the uncropped original photo remains recoverable inside the file header.

When is EXIF preserved? Messaging apps in "Standard Photo" mode and social media feeds usually strip EXIF during server recompression. However, sending a photo via email attachment, AirDrop, cloud drive link, WhatsApp "Send as Document," or direct P2P transfer sends the exact byte-for-byte original file—GPS coordinates and all.

2. PDF Metadata: XMP Packets, Font Paths & Fake Redactions

PDFs are object-oriented containers that accumulate history every time they are edited and saved (especially when saved using PDF "Incremental Updates," which append changes to the end of the file without erasing old objects):

Document Info Dictionary & XMP Stream: Stores /Author (often auto-populated with your Windows/macOS login name), /Creator (e.g., Microsoft Word version), /Producer, exact creation and modification timestamps with timezone offsets, and a unique DocumentID / InstanceID.
Incremental Save Ghosts: If a PDF is modified using incremental saves, previous versions of the text or form fields can often be extracted by rolling back to an earlier cross-reference (xref) trailer in the file.
The Black-Rectangle "Redaction" Disaster: Placing a black box annotation over a Social Security Number, bank account, or name in macOS Preview or a basic PDF editor does not delete the text. The underlying ASCII/Unicode characters remain in the PDF content stream underneath the rectangle and can be copied with `Ctrl+A` / `Ctrl+C` in two seconds.

3. Word, Excel & PowerPoint (`.docx`, `.xlsx`, `.pptx`)

Modern Office Open XML files are standard ZIP archives—if you rename contract.docx to contract.zip and extract it, you can read its internal XML metadata directly:

docProps/core.xml & app.xml: Logs dc:creator (original author), cp:lastModifiedBy (last editor), revision count, total editing time in minutes, and company name.
Tracked Changes & Hidden Comments (word/document.xml): Simply switching Word's view dropdown from "All Markup" to "No Markup" only hides deletions visually on your screen. Anyone who opens the file can switch back to "All Markup" and read every rejected salary figure, internal legal debate, or deleted paragraph unless you explicitly click Accept All Changes and Stop Tracking and delete all comments.
Embedded Cropped Pictures: When you crop a screenshot inside Word or PowerPoint, Office keeps the full uncropped image inside word/media/ by default so you can un-crop it later—unless you run Compress Pictures → Delete cropped areas of pictures.

Quick Reference: How to Sanitize Each File Type Before Sharing

File Type	What Can Leak	Fastest Clean Method	Advanced / CLI Method
Photos (`HEIC`, `JPG`, `PNG`, `TIFF`)	GPS location, timestamp, camera serial, uncropped EXIF thumbnail	Re-encode pixels in trsf.it Image Converter (Canvas/WASM pixel rebuild)	`exiftool -all= photo.jpg` or `mat2 photo.jpg`
PDF Documents (`.pdf`)	Author username, XMP edit history, hidden layers, fake redactions	Print to a fresh PDF, or rasterize pages to images for 100% flat pixel output	Adobe Acrobat Pro / PDFelement Sanitize Document or `qpdf --linearize` + `mat2`
Office Files (`.docx`, `.xlsx`, `.pptx`)	Author/editor names, Tracked Changes, comments, uncropped embedded media	Accept all changes, delete comments, and export as a clean PDF	Word File → Info → Check for Issues → Inspect Document
ZIP Archives (`.zip`)	Hidden OS files (`.DS_Store`, `Thumbs.db`, `__MACOSX`) exposing folder paths	Zip individual clean files rather than whole working directories	`zip -d archive.zip "__MACOSX" ".DS_Store"`

A Simple 2-Step Workflow for High-Privacy File Sharing

Sanitize the file locally first: If you are sharing a photo or document scan, drop it into the trsf.it Image Converter and export a fresh PNG, WebP, or JPEG. Because browser Canvas conversion reconstructs the image from raw decoded pixels, camera EXIF GPS tags and old embedded thumbnails are discarded without your file ever leaving your browser.
Transfer over an end-to-end encrypted channel: Send the sanitized file directly to the recipient's device using trsf.it QR Transfer (for live device-to-device transfers) or a zero-knowledge encrypted link from our Encrypted Cloud Storage Guide.