Metadata leaks are quieter than image leaks
Subscribers share files. Platforms re-encode them. Sometimes the picture looks fine while hidden tags still describe where it was taken, which camera was used, or which software touched it last.
For creators who shoot at home, travel for sets, or work under a pseudonym, GPS coordinates in EXIF are a serious privacy failure. Even without GPS, serial numbers and timestamps can corroborate identity across leaks.
Common tags worth reviewing
| Tag family | Why it matters |
|---|---|
| GPS | Reveals capture location when present |
| Device serial / body ID | Links multiple releases to one shooter |
| Software & edit history | Shows toolchain and revision path |
| Copyright / artist fields | May expose real names or studio labels |
Not every tag is dangerous for every workflow. A studio shoot with intentional credit fields is different from a pseudonymous premium gallery where location must stay private.
Browser-based checks vs blind export
Opening a file in a desktop viewer does not always show the full tag set. A structured audit groups EXIF, IPTC, GPS, and rights fields so you can score risk before delivery.
Because premium content should not be uploaded to random online “metadata remover” sites, local or in-browser processing keeps control with you.
Warning: Stripping metadata for subscribers does not remove your need for license notices and recipient tracking on the image itself. Metadata hygiene complements watermarking; it does not replace it.
A practical pre-send habit
Before each batch goes out:
- Spot-check one master file and one exported subscriber copy.
- Remove GPS and device identifiers you do not intend to publish.
- Align copyright fields with the license language you send alongside the files.
- Keep a note of which export settings your editor uses so the next batch stays consistent.
When Foddo fits after the check
One-off cleanup in a free browser tool is enough for small releases. At scale, Foddo separates the work into two steps: use the Metadata Editor for batch read, write, and clear operations as a prep step, then run Distribution mode to generate per-subscriber copies with invisible recipient IDs. Metadata cleanup and watermarking are related, but they are not combined automatically in one pass.