Privacy Basics
Metadata Privacy Checklist: 12 Checks Before You Share Any File
A two-minute checklist covering location data, author fields, revision history, hidden sheets and embedded thumbnails before you share any file.
· 6 min read
Short answer: Before sharing any file, run these twelve checks. They take under two minutes and cover the leaks responsible for most real-world metadata incidents: location, authorship, revision history, hidden content and re-shared originals.
The Checklist
1. Strip location data from photos
GPS coordinates are accurate to a few metres and reveal home, school and workplace. Check every image, including ones forwarded to you. See remove EXIF data from iPhone photos.
2. Remove author and company fields
PDF, Word, Excel and PowerPoint all store Author, Company and "Last Modified By". These are the fields that most often identify a sender who intended to be anonymous.
3. Clear revision and track-changes history
Accepted changes still leave a markup tree in DOCX. Use Word's Document Inspector plus a dedicated cleaner.
4. Delete comments and annotations
Reviewer names, internal debate and pricing notes routinely survive into published PDFs.
5. Check for hidden rows, sheets and slides
Spreadsheets hide entire tabs; decks hide slides and speaker notes. Metadata cleaning does not unhide them — inspect manually.
6. Remove embedded thumbnails
JPEG EXIF can hold a thumbnail generated before your crop, showing the region you cropped out. A re-encode or a lossy clean removes it.
7. Look for file paths
Template and print paths expose internal network structure, usernames and project codenames.
8. Strip document producer and software versions
"Produced by AcmeDMS 4.2" tells an attacker exactly what to target. Low value to keep, real value to remove.
9. Check custom XML and DMS properties
Document-management plugins inject matter numbers, client IDs and classification labels into custom properties.
10. Re-encode when anonymity matters
Camera serial numbers and maker notes can persist in odd corners of a file. A full re-encode guarantees a fresh container.
11. Verify after cleaning
Re-open the file in an image metadata viewer or your document properties panel. Never assume the tool worked — confirm it.
12. Redact the visible content too
Metadata cleaning does nothing about a visible signature, letterhead, watermark or username in a screenshot. Use solid-block redaction, not blur.
Quick Reference by File Type
| File type | Highest-risk fields | Guide |
|---|---|---|
| JPEG / HEIC | GPS, camera serial, thumbnail | Photo guide |
| PNG | Text chunks, AI prompts, software | PNG guide |
| Author, producer, XMP, hidden layers | PDF guide | |
| DOCX | Author, track changes, template path | Word guide |
| MP4 / MOV | GPS, device model, encoder | Video guide |
Try MetaClean — clean this kind of file in seconds.
Strip EXIF, GPS, author, and edit-history metadata from photos, PDFs, and Office documents right in your browser.
Clean a file now · See what gets removed · Step-by-step guides · Pricing
When to Be Extra Careful
- Sending documents to opposing counsel or a regulator
- Posting evidence, leaks or tips to a journalist
- Uploading anything to a public forum, marketplace listing or dating profile
- Sharing files with AI assistants — see what ChatGPT, Claude and Gemini keep
- Publishing photos of a home, child, or anything taken at your own address
FAQ
How long does this checklist take? Under two minutes per file once the cleaning step is a habit; batch cleaning makes it seconds per file.
Does emailing a file strip metadata? No. Email attachments are transferred byte-for-byte. Some messaging apps re-encode images, but email does not.
Do I need to redo this if I edit the file again? Yes. Saving re-writes author and timestamp fields, so clean as the final step before sending.
Can I automate it? Yes — batch cleaning and API access are available on paid plans for teams that need it in a workflow.
Bottom Line
Twelve checks, one final cleaning pass, one verification. Run the checklist against a file now.
Frequently asked questions
How long does this checklist take?
Under two minutes per file once the cleaning step is a habit; batch cleaning makes it seconds per file.
Does emailing a file strip metadata?
No. Email attachments are transferred byte-for-byte. Some messaging apps re-encode images, but email does not.
Do I need to redo this if I edit the file again?
Yes. Saving re-writes author and timestamp fields, so clean as the final step before sending.
Can I automate it?
Yes -- batch cleaning and API access are available on paid plans for teams that need it in a workflow.
Try MetaClean Pro free — remove metadata from your files in seconds.