How to check whether a metadata remover uploaded your photo

Is a metadata remover safe? It depends entirely on one thing — whether it sends your file anywhere — and that turns out to be the easiest part to check.

Search for one and you will find a hundred. Nearly all say the words “private” and “secure” somewhere on the page. Very few say where your file goes, and the ones that do are not always right.

The reassuring thing is that you do not have to take anybody’s word for it, including ours. Whether a web tool uploaded your photo is a question with a definite answer, and your browser will tell you in under a minute.

The thirty-second test

1. Open the tool’s page.
2. Press F12 to open developer tools — or right-click anywhere and choose Inspect. On a Mac, Cmd + Option + I.
3. Click the Network tab.
4. Now drop in your file and run the tool.

Watch the list. You are looking for a request whose size is roughly the size of your photo, with a method of POST or PUT. A four-megabyte photo produces a four-megabyte request. It is not subtle.

If nothing of that size appears, the file never left your machine.

Ignore the small stuff — fonts, stylesheets, analytics pings, a few kilobytes each. Those are the page loading itself. You are looking for one large outbound request that appears at the moment you press the button.

The stricter test

The Network panel tells you what happened. Switching off your network tells you what is possible.

Load the page, then disconnect from Wi-Fi entirely. Now use the tool.

A tool that processes files on your device carries on working, because it never needed the network. A tool that uploads them stalls, spins, or fails with an error. There is no way to fake this one: code that requires a server cannot run without a server.

Our tool passes this test — it registers a service worker precisely so that it keeps working offline, and we consider that the only honest form of the privacy claim. Try it with your network off. That is the point of building it that way.

What “we delete your files after an hour” actually means

Plenty of upload-based tools disclose the upload and then reassure you about deletion. Read that carefully, because it concedes the part that matters.

It means your photo — with its coordinates, its device serial number, its timestamp — was transmitted over the internet, written to a server’s disk, and held there. You are being asked to trust a deletion policy, the operator’s competence, their hosting provider, their backup retention, and their access logs. For an ordinary photo that may be a fine trade. For the photo you specifically wanted to strip location data from, it is a strange one: the leak you were trying to prevent has already happened by the time the tool runs.

“Deleted after an hour” is a promise. “Never sent” is a property you just verified yourself.

Five other things worth checking

Does it re-encode your image? Most do. Drawing a photo onto a canvas and exporting it is the easy way to strip metadata, and it re-compresses your picture every time. You get privacy and quietly pay for it in quality. We measured what that costs — the giveaway is a downloaded file noticeably smaller than the original, and dimensions or a file size that changed when nothing about the picture did.

Does it show you what it found? A tool that reports “Done!” without ever displaying the metadata is asking you to trust an outcome you cannot see. Use an EXIF viewer on the result. If anything personal is still in there, you have your answer.

Does it check its own work? Removing a metadata block and confirming it is gone are different operations. Very few tools do the second.

Is there a privacy policy that mentions files? Not a generic one about cookies — one that says specifically what happens to uploads. Its absence is informative.

What about installable apps? The Network panel does not help you here, which is precisely the problem. A native app has filesystem access, background execution and no easy way for you to watch what it sends. “Free metadata remover app” is a category worth being slower to trust than a web page you can inspect.

On asking Reddit

A lot of people search for these tools with “reddit” appended, which is a reasonable instinct — the category has a credibility problem and crowd vetting beats marketing copy.

It is still second-hand. A recommendation tells you the tool worked for someone; the Network panel tells you what it did with your file. The test above takes less time than reading the thread, works on any tool including ones nobody has reviewed, and does not go out of date when a site changes its backend.

Run it on us too. We would rather be verified than believed.