The conventional wisdom is that social media platforms strip metadata from your photos when you upload them. For some platforms, this is true — sort of. For others, it’s not true at all. And for nearly all of them, the reality is more nuanced than a simple yes or no. Here’s what actually happens to your photo metadata on every major platform in 2026.
Instagram strips GPS coordinates and most identifying EXIF data from the versions of your photos that other users can download. This includes device information, timestamps, and camera settings. What other people see is a re-encoded image with minimal metadata. However, Instagram reads and retains your original metadata internally before stripping it from the public file. Your location data feeds Instagram’s ad targeting and content recommendation systems. So Instagram protects your metadata from other users — but not from Instagram itself.
Facebook behaves similarly to Instagram (both are owned by Meta). Photos posted to your feed, profile, cover photos, and Stories are stripped of GPS and most EXIF data in the files that other users can access. Facebook Messenger also strips metadata from images sent in chats. But like Instagram, Facebook processes and stores your original metadata internally. The distinction matters: Facebook knows where every photo was taken, even if your friends can’t see that information.
Twitter/X removes GPS data and most identifying metadata from uploaded images. Downloaded images from Twitter contain minimal metadata — typically just basic image dimensions and encoding information. Twitter’s approach has been consistent since 2015 when they began stripping GPS data.
Snapchat strips EXIF data from snaps. Given the ephemeral nature of the platform, metadata stripping is consistent with their general approach to content privacy.
TikTok strips most metadata from uploaded images and video thumbnails. However, as with other platforms, TikTok’s own data collection practices are extensive and the original metadata is processed server-side before being stripped from content served to other users.
WhatsApp has a split behaviour that catches people off guard. When you send a photo through WhatsApp’s standard image sharing (which compresses the image), most metadata is stripped. But when you send a photo as a document — which many people do to preserve image quality — the original file is sent with full metadata intact. This means the recipient gets your GPS coordinates, device information, and everything else. The same photo, two sharing methods, completely different privacy outcomes.
Telegram behaves similarly to WhatsApp. Compressed photo sharing strips most metadata, but sending as a file preserves everything.
Email (Gmail, Outlook, Apple Mail, etc.) preserves all metadata in attachments. When you attach a photo to an email, the recipient receives the original file with every EXIF field intact. This is the most common way people accidentally share their location data — emailing a photo taken at home sends their home coordinates along with it.
Google Drive, Dropbox, and OneDrive all preserve metadata in stored and shared files. When you share a link to a photo in cloud storage, the person who downloads it gets the full original file with all metadata. These services are designed for file fidelity, not privacy scrubbing.
iCloud shared links preserve original file metadata. When you share photos via an iCloud link, recipients can download the original files with full EXIF data.
Flickr historically preserved EXIF data intentionally, as it’s primarily used by photographers who want their camera settings visible. Users can toggle whether EXIF data is publicly displayed, but the data remains in the downloaded file regardless of the display setting.
Discord strips most metadata from images uploaded to chat channels. However, the behaviour can vary depending on how images are shared (direct upload vs. link), and Discord’s metadata handling has changed over time.
Reddit strips EXIF data from images uploaded directly through Reddit’s image hosting. However, if you link to an externally hosted image, the original metadata is preserved in the source file.
LinkedIn strips GPS data from uploaded images, though some other EXIF fields may be partially preserved.
Try MetaStrip — it's free
Strip metadata from any photo in seconds. No upload, no account.
This is the part that most people miss. Even platforms that strip metadata from the files other users download still process your original metadata server-side. Facebook, Instagram, TikTok, and others read your GPS coordinates, device information, and timestamps before discarding them from the public file.
This means these platforms build a location history for you based on your uploaded photos — separate from any location sharing you’ve explicitly enabled. A photo taken at home tells the platform where you live. A photo taken at a restaurant tells the platform where you eat. Over time, your photo metadata creates a detailed profile of your movements, even if no other user can see that data.
The only way to prevent platforms from collecting your metadata is to remove it before uploading. Once the file hits their servers, the metadata has already been read and processed.
Several scenarios break the general patterns:
Embedded links vs. native uploads. Many platforms only strip metadata from natively uploaded images. If you post a link to an image hosted elsewhere, the source file retains its original metadata. The platform might strip metadata from its cached preview, but anyone clicking through to the original source gets the full file.
High-quality or original sharing modes. Several messaging apps offer “original quality” or “document” sharing modes that bypass compression and metadata stripping. Users often select these modes to avoid quality loss, not realizing they’re also preserving GPS data.
API and third-party uploads. Photos uploaded through platform APIs or third-party apps may be processed differently than photos uploaded through the official app. Metadata stripping policies sometimes apply only to the official upload pipeline.
Screenshots and screen recordings. Taking a screenshot of a photo creates a new image with the screenshot’s own metadata (typically your device info and timestamp, but without the original photo’s GPS data). This is sometimes used as a manual metadata stripping technique, though it degrades image quality.
If your goal is preventing other users from accessing your photo metadata, most major social platforms provide reasonable protection for standard uploads. But if your goal is preventing the platform itself from collecting your location and device data, or if you share photos through email, messaging apps, cloud storage, or any other non-social channel, the only reliable approach is stripping metadata before sharing.
Platform policies change without notice. A platform that strips metadata today might preserve it tomorrow, or might change how different sharing modes handle metadata. Building your privacy on platform behaviour means trusting decisions you can’t control and might not even hear about.
MetaStrip works regardless of where you’re sharing, which platform’s policy changed this week, or whether you’re sending via email, chat, cloud link, or social media upload. Three seconds of metadata stripping gives you certainty that no platform policy change can take away.
Free for single files. No account, no upload, no tracking.
Open MetaStrip →