undetectable.me

Does metadata removal remove everything?

A metadata strip clears the tag block of GPS, time and device, but changes no pixels, so the sensor fingerprint, the scene, the face and any indexed copy survive.

By The undetectable.me team
5 min read
Contents

No. Removing metadata clears the tag-level data such as GPS coordinates, the timestamp and the device name, but it changes no pixels, so it leaves the camera’s sensor fingerprint, the geolocatable scene and the face intact, it does nothing to copies that have already been indexed, and the platform you uploaded to may still hold your original file. Stripping metadata is necessary hygiene. It is not, on its own, anonymisation.

What a metadata strip actually clears

Every photo ships with a block of structured text alongside the pixels: the EXIF, XMP and IPTC tags. That block is where the obvious identifiers live, the GPS coordinates, the capture timestamp, the camera make and model, the serial number, the software used and sometimes an owner name. A metadata strip deletes that block. It takes seconds, it is worth doing before you post anything, and it removes the single easiest way to place and date a photo.

The catch is that the block is separate from the image. Deleting it rewrites the container, not the content. Everything the camera recorded in the pixels themselves is untouched, and that is where the durable identifiers sit.

It does not touch the sensor fingerprint

The camera that took the photo leaves a fingerprint in the pixels called photo-response non-uniformity, or PRNU, a pattern of tiny sensitivity differences between the individual photosites on the sensor. Lukáš, Fridrich and Goljan (IEEE TIFS 2006) introduced it for identifying the specific device that produced an image, not just its model. The trace is faint but real, and because it is a per-device pattern rather than a per-model one, it works as an identifier rather than a mere category. Because it lives in the pixel values and not in any tag, a metadata strip does not weaken it at all.

Re-saving the file does not clear it either. Goljan and Fridrich (Proc. SPIE 6819, 2008) report that the fingerprint “survives a wide range of common image processing operations, including lossy compression, filtering, and gamma adjustment.” So exporting a fresh JPEG with the tags removed keeps the sensor trace readable. What this channel needs is covered in can a photo be traced without metadata.

It does not touch the scene

The content of the frame is its own locator. Modern geolocation models place a photo from the visible scene alone, with no GPS tag in sight. Weyand, Kostrikov and Philbin’s PlaNet (ECCV 2016) treats location as a classification problem over the globe and, in their words, “outperforms previous approaches and even attains superhuman levels of accuracy in some cases.” The signal the model reads is the ordinary content of the photo, the vegetation, the road markings, the signage, the building materials and the angle of the light, none of which a tag strip alters. The systems have only improved since. Haas, Skreta, Alberti and Finn’s PIGEON (CVPR 2024) places 40.4 percent of its predictions within 25 km of the true location.

A metadata strip removes the GPS tag. It does nothing about the storefront, the mountain ridge, the licence plate or the architectural style in the picture. Removing location from a photo is a separate job, covered in remove GPS and location from a photo.

It does not touch the face

A face is a dense identifier. Deng, Guo, Xue and Zafeiriou’s ArcFace (CVPR 2019) maps a face to a numerical embedding that a recognition system can match against a gallery, and none of that depends on the tags. Recognition does not even need a pristine portrait, a partial or side-on face can still carry enough structure to match. Downscaling or lightly obscuring the face does not reliably defeat it: Kim, Jain and Liu’s AdaFace (CVPR 2022) is built for exactly the hard case, noting that “Recognition in low quality face datasets is challenging because facial attributes are obscured and degraded,” and targeting that regime directly.

Blurring the face in place is not removal either. Todt, Hanisch and Strufe’s Fantômas study (PoPETs 2024) shows that in-place obscuration such as blur and pixelation is frequently reversible, because it only averages the identifying information rather than deleting it. What to do instead is covered in blur faces: when blur is not enough.

It does not touch copies already indexed

Metadata removal acts on your file, on your device, now. It cannot reach the copies that already exist elsewhere. If the photo was posted before, a reverse-image index may already hold a perceptual hash of it, and stripping the tags on your local copy changes nothing about the already-indexed one. The platform you upload the clean version to also typically keeps the original bytes it received on its own servers, tags and all, whatever your account later displays. Removal after the fact cannot un-ring those bells.

What removal actually takes

A metadata strip is the first step and the easiest one, and it genuinely removes the GPS-tag-and-timestamp layer that is otherwise the fastest route to placing you. It is just not the whole task. The sensor fingerprint, the geolocatable scene, the recognisable face and any already-indexed copy all survive it, because each of those lives in the pixels or on someone else’s server, not in the tag block you deleted. Treat metadata removal as necessary hygiene, then handle the surviving channels one at a time: what else survives a clean tag strip is mapped in can you be identified after removing EXIF data, and the practical multi-channel version is how to make a photo untraceable.

Sources

  • Lukáš, Fridrich, Goljan (2006). Digital Camera Identification from Sensor Pattern Noise. IEEE TIFS 1(2):205-214.
  • Goljan, Fridrich (2008). Camera Identification from Cropped and Scaled Images. Proc. SPIE 6819, Security, Forensics, Steganography, and Watermarking of Multimedia Contents X.
  • Weyand, Kostrikov, Philbin (2016). PlaNet: Photo Geolocation with Convolutional Neural Networks. ECCV 2016.
  • Haas, Skreta, Alberti, Finn (2024). PIGEON: Predicting Image Geolocations. CVPR 2024.
  • Deng, Guo, Xue, Zafeiriou (2019). ArcFace: Additive Angular Margin Loss for Deep Face Recognition. CVPR 2019.
  • Kim, Jain, Liu (2022). AdaFace: Quality Adaptive Margin for Face Recognition. CVPR 2022.
  • Todt, Hanisch, Strufe (2024). Fantômas: Understanding Face Anonymization Reversibility. PoPETs 2024.
#metadata#exif#anonymising#privacy#tracing
Last updated
19 June 2026
Category
Anonymising