Skip to content

Platforms

Why 'Instagram strips EXIF anyway' misses the point

Platforms strip metadata from the copy others can download. That protects less than it sounds, and the exceptions are where real leaks happen.

Updated

Whenever photo metadata comes up, someone points out that the major platforms strip it. That is broadly true, and it is a weaker guarantee than it appears.

What “strips EXIF” actually means

It means: the copy other users can download has no EXIF.

It does not mean the metadata was never transmitted. Your original file — coordinates, serial number, timestamp intact — was uploaded, processed on the platform’s servers, and retained under whatever their policy allows. Stripping happens after receipt, on their side, to the derivative they serve.

If your concern is a stranger downloading your photo and reading your address out of it, platform stripping does handle that. If your concern includes the platform itself, it does nothing at all.

The exceptions are where people get caught

Public posts on the big networks are the well-behaved case. The leaks live at the edges:

Messaging apps in file mode. WhatsApp and Telegram both strip metadata when you send a photo through the normal picker, because compression discards it. Both send the original untouched when you use the document or file option. People choose that option specifically to avoid compression — that is, precisely when they care about the image — and hand over full EXIF as a side effect.

Discord attachments. Inline previews are processed. A recipient who downloads the attachment rather than viewing it can end up with the original bytes.

Linked images. Reddit strips metadata from images it hosts. Link to a file on your own server and Reddit never touches it, so whatever your host serves is what people receive.

Everything that is not a social network. Email attachments. Shared drives. Support tickets. Marketplace listings. Cloud folder links. Printing services. None of these strip anything, and collectively they are where most photos actually travel.

PDFs. LinkedIn strips image EXIF, but a carousel is a PDF, and PDF metadata routinely names the author and the licence holder of the software that made it.

The quality cost nobody mentions

Platform stripping is a side effect of re-encoding. Your photo is decoded, resized and re-compressed, and the metadata does not survive that. So “let Instagram handle it” also means “accept their compression settings on my photograph”.

Stripping locally and uploading a clean original gives you both the privacy and the quality.

The habit worth having

Strip before you upload, not after.

It takes a second, it costs nothing here, and it makes every platform’s policy irrelevant to you. If the coordinates were never in the file you sent, there is nothing to trust, nothing to verify, and nothing to keep track of when a platform quietly changes how its pipeline works.

We keep a platform-by-platform breakdown for reference, but its main use is showing how inconsistent the landscape is — which is itself the argument for handling it yourself.