Discord is one of the most active community platforms in the world, hosting millions of servers dedicated to gaming, development, crypto, digital art, and casual socializing. Because Discord feels like a casual chat app, users routinely drop camera photos, desk setups, pet pictures, and creative exports into public channels or direct messages without second thought.
A common assumption is that modern social platforms automatically strip all private metadata from uploaded photos. With Discord, the reality is more nuanced—and depends heavily on how the media is uploaded, whether attachments are downloaded directly, and what file types are used.
This guide details exactly what Discord does with image metadata, how original uploads can leak your location and camera serial numbers, how Midjourney and AI generation metadata leaks through Discord channels, and how to safely sanitize files before sharing.
1. What happens when you upload an image to Discord?
When you send an image in a Discord channel or DM, Discord's media pipeline processes the file in two distinct ways:
- The In-Chat Preview (Media Proxy): Discord generates a compressed, downsampled preview displayed inside the chat client. These previews are served via
media.discordapp.netor Discord's media proxy. During this resizing step, standard EXIF metadata (including GPS) is stripped from the rendered preview. - The Original Attachment: For standard desktop and mobile uploads under your server's file size limit (10MB for free users, up to 500MB for Nitro subscribers), Discord stores the file on its CDN (
cdn.discordapp.com). When a user clicks "Open in browser" or right-clicks and chooses "Save Image", the client requests the original attachment.
Historically, Discord preserved full EXIF data on original file attachments. While Discord has progressively deployed server-side stripping on common JPEG uploads in certain client versions, the protection is inconsistent across different operating systems, file formats (PNG, WebP, HEIC), and upload methods.
More importantly, relying on Discord's server-side processing means you have already uploaded your unencrypted, uncompressed original file—including your home coordinates—to Discord's backend infrastructure.
2. The Midjourney and AI Generation Metadata Leak
Discord is the primary interface for Midjourney, one of the most widely used AI image generation engines. Millions of creators generate, upscale, and download artwork directly within Discord bot channels.
When Midjourney generates a PNG image, it embeds detailed generation parameters directly into the PNG file container:
- Prompt text: The exact positive prompt used to generate the image.
- Negative prompts and parameters: Flags such as
--ar 16:9,--v 6.0,--stylize,--seed, and job IDs. - PNG Chunks: Stored inside
tEXt,iTXt, orparameterschunks. - C2PA Manifests: Newer generative tools and Discord integrations increasingly embed signed C2PA credentials in custom chunks like
caBX.
If you download an image from Midjourney on Discord and re-upload it to a client, an art contest, or a commercial portfolio, anyone can open that file in a metadata inspector and read your exact prompt formula, seeds, and generative history.
3. Real-World OSINT Risks: How Gamers and Creators Get Doxxed
In open-source intelligence (OSINT) investigations, public Discord servers are frequent goldmines for location tracking. The typical scenario rarely involves sophisticated hacking; it stems from everyday casual sharing:
- Desk setup and battlestation photos: A creator posts a picture of their new GPU or mechanical keyboard taken with their smartphone. If uploaded as a raw attachment or file, the JPEG
APP1segment may contain high-precision GPS coordinates (latitude, longitude, and altitude). - Pet and window photos: Sharing a photo of a pet on a balcony or a view of snow outside. Even when GPS is absent, EXIF tags reveal the exact timestamp down to the second, camera make and model, unique sensor serial numbers, and software versions.
- Camera serial tracking: High-end mirrorless cameras (Sony, Canon, Nikon) embed the camera body's unique hardware serial number into EXIF data. If you post anonymous leaks in one Discord server and personal photos in another, the two identities can be linked by serial number.
| Metadata Field | Where It Appears | Risk Level | What It Reveals |
|---|---|---|---|
| GPS Coordinates | JPEG APP1 / HEIC metadata |
Critical | Exact physical location within 3-5 meters |
| Camera Serial Number | EXIF MakerNote / BodySerialNumber | High | Links separate accounts using the same physical device |
| Midjourney Prompt Chunks | PNG tEXt / parameters |
Medium | Complete prompt text, negative prompts, and seeds |
| Capture Timestamp | EXIF DateTimeOriginal | Medium | Exact local time of photo capture, timezone, and daily habits |
| C2PA Manifests | JPEG APP11, PNG caBX |
Medium | Cryptographic proof of AI generation or editing tools used |
4. How to safely clean files before posting on Discord
The only reliable way to guarantee that no location data, camera fingerprints, or AI prompts leak to Discord or other users is to strip metadata locally on your device before uploading.
Why Not Just Take a Screenshot?
Taking a screenshot of the image removes original EXIF data, but degrades image resolution, discards wide color gamuts, and adds a new operating system screenshot fingerprint (display resolution, device model, creation time).
The In-Browser Canvas Approach
The cleanest and fastest method is running the file through an in-browser Canvas redraw:
- The browser decodes the image into memory via
ImageBitmap. - The image is drawn onto an HTML5 Canvas matching its native dimensions.
- A clean image (JPEG, PNG, or WebP) is exported without copying any header packets (
APP1,APP11, XMP, IPTC, or custom PNG chunks).
Because this happens 100% client-side inside your browser tab using JavaScript, the original metadata is discarded before any file touches Discord's servers or internet connections.
5. Best Practices and FAQ
- Never rely on Discord to scrub sensitive data for you. Even if chat previews hide EXIF, uploading files gives Discord's servers access to the raw metadata.
- Check Midjourney PNGs. If you use AI art for client work, remember that default Discord downloads carry your full prompt history.
- Turn off camera location tags. On iOS (Settings > Privacy & Security > Location Services > Camera) and Android (Camera Settings > Save Location), disable geolocation tagging if you frequently take photos intended for online communities.