Skip to content
CreatorPrivacyKit
X / Twitter · image metadata

An X photo can still carry EXIF and GPS

The JPEG you upload to X can still list EXIF, GPS, software, and C2PA. Remove what you do not want to share before you post.

Updated October 24, 2026

An X photo can still carry EXIF and GPS?

The JPEG you upload to X can still list EXIF, GPS, software, and C2PA. Remove what you do not want to share before you post. X recompresses many images. The useful privacy step still happens first: inspect the file on your device, then upload a copy that no longer carries GPS, device, or provenance fields you do not want public.

C2PA: Coalition for Content Provenance and Authenticity; C2PA specification 2.4; WhatsApp Help: media and documents; WhatsApp Help: longer videos

Last updated

X recompresses many images. The useful privacy step still happens first: inspect the file on your device, then upload a copy that no longer carries GPS, device, or provenance fields you do not want public.

Before upload

You can list EXIF, GPS, software, and C2PA fields in the source file.

Public copy

After posting, download the image a viewer receives. That shows whether the public file was resized, recompressed, or stripped of common metadata.

On the platform

The public image is what viewers get. It does not disclose what X stored internally.

Inspect the file you will upload

Camera originals often include GPS, capture time, device model, and editing software. Generator exports may include Content Credentials. Open that file before you attach it in the X composer — not a screenshot of the draft.

  1. Keep the original in your archive.
  2. Inspect EXIF, GPS, XMP, and C2PA on the copy you plan to post.
  3. Export a sharing copy if those fields should not go out.
  4. Inspect the copy again, then upload that file.

What a downloaded X image can tell you

After a post is public, save the image a normal viewer can open. Compare hash, dimensions, and remaining metadata with your source. That tells you whether the delivered copy is byte-identical, resized, or missing common fields.

It does not tell you how X ranks the post, or whether GPS was used internally. If location should stay off the public copy, remove it before upload rather than relying on the public derivative.

Remove metadata you do not want to share

A clean sharing copy is the reliable privacy step. Keep enough visual quality for the post. Do not overwrite the camera original.

A local strip table, not an upload to X

On 2026-10-24 this machine measured a synthetic 640×480 RGB fixture, not a camera photo. The XMP description read back by ExifTool 12.76 was “synthetic fixture, not a camera photo”. ExifTool wrote GPS 10 deg 0' 0.00" N, 20 deg 0' 0.00" E, altitude 12 m Above Sea Level, Make CPKFixture, Model Synthetic-20261024, Artist creatorprivacykit-fixture, and DateTimeOriginal 2026:10:24 09:00:00. The JPEG also had IPTC Keywords “fixture” and IPTC Credit “CPK fixture”. Pillow on this machine is 10.2.0. The file was not posted to X.

The same day, How to post photos or GIFs on X included this tagging-location paragraph: “When you select a photo or GIF, you might see Add location and a list of suggested locations under the image. To tag your photo or GIF with a location, tap Add location to select a location from a list, or tap one of the locations suggested based on your current location or the location where you took the photo.” The article’s question list includes “What happens to the Exif data for my photo?” The answer panel was not in the extract. A curl of that URL with a browser user agent returned HTTP 403, so this page does not quote an Exif answer from X Help.

Strip Metadata’s 2026-10-13 note, opened here on 2026-10-24, says they posted one iPhone 14 Pro Max JPG (3024×4032, about 1.9 MB) from the X website. They report public sizes 510×680, 1536×2048, and 3024×4032 with no EXIF, and a full-size file of 1.81 MB against their original 1.89 MB. They say they tested one public website post and did not test phone apps, direct messages, PNG, or video. Those are their figures, not this fixture.

File and commandBytesWhat ExifTool 12.76 still readSHA-256
JPEG before18439GPS, Make, Model, Artist, DateTimeOriginal, IPTC, XMPec3c533def119a6c86be9796721deb6e8a783950aae88df6e51a7d3f9d508afa
JPEG exiftool -GPS:all=18281GPS gone. Make, Model, Artist, DateTimeOriginal, IPTC, and XMP remain43b202176ed2aaa4d8bb8ec7cc9eb6d78fd2edafd4e5db6900152bf9f84df48d
JPEG exiftool -EXIF:all=18001Make, Model, Artist, DateTimeOriginal, and GPS gone. IPTC and XMP remain2470f8b8919fd302d6301669f5b6051f8a6bd696a8c0fd53decdc8f56f05e144
JPEG exiftool -all=14983Width 640 and height 480 only2fc8e5afd6ba7a88de76a7c20e82d1505713a3d6f16944184e783be216611e11
JPEG mat2 --inplace 0.13.4, exit 012790Width 640 and height 480 only55770ce18b8f4f12706ef4ed93ea3e3132d90c7289e889e2f5a510e9ac380b4d
WebP mat2 --inplace, exit 2555342Unchanged, including GPS. mat2 printed format (image/webp) is not supportedcf1366de8ace272b498dccc80161572d4366a24d7cd6d085162e5ae0eb097e06

Deleting only the GPS block left the capture time, camera name, IPTC, and XMP on this JPEG. mat2 0.13.4 did not strip this WebP. The full row list, including PNG, is in docs/evidence/runs/2026-10-24-zalo-kakao-x.json. A downloaded public image can show what viewers receive. It does not show what X stored from the original upload.

Questions people actually search

Does X remove EXIF GPS from a photo?

This page did not post a file to X. X Help lists an Exif question, and the answer panel was not in the 2026-10-24 extract. On the local JPEG, ExifTool 12.76 with -GPS:all= removed GPS and left Make, DateTimeOriginal, IPTC, and XMP. The file went from 18439 bytes to 18281 bytes.

What happens to the Exif data for my photo?

That is the question title on the X Help page opened 2026-10-24. This page did not retrieve the answer body, and curl of the help URL returned HTTP 403. Strip Metadata’s October 2026 note says their one public website JPG lost EXIF in the sizes they downloaded. That is their test, not this fixture, and they say they did not test phone apps, direct messages, PNG, or video.

Know what is in the upload

CreatorPrivacyKit inspects supported metadata in the browser and exports a cleaner copy before you post to X.

Inspect an image →