The privacy risks of photo metadata
From location tracking to device fingerprinting: the specific threats hidden in every unshared EXIF field.
Location disclosure. GPS tags reveal where you live, work, drink, and travel. Any photo you post publicly with GPS intact is a pin on a map.
Device linkage. Camera and lens serial numbers uniquely identify hardware. Two photos with the same serial almost certainly came from the same physical device, even years apart.
Timeline reconstruction. Timestamps, especially with GPS, let anyone build a movement log from your public photos.
Software fingerprinting. Edit stacks can reveal your OS, editor, and workflow — useful for social engineering.
Behavioral inference. Aperture, ISO, and lens choices reveal habits: professional gear, low-light shooting, macro work. Combined with GPS, this paints a surprisingly detailed portrait.