Photos carry two layers of information: what's visible in the frame, and what's recorded in the file. Sharing publicly means auditing both.
Layer 1: What's Visible
Scan the frame for the things you didn't intend to publish:
- Other people's faces, especially children and anyone who didn't consent to being posted.
- Licence plates, house numbers, street signs and mailboxes — together these pinpoint a location precisely.
- Documents, screens and badges in the background: a laptop showing an inbox, a delivery label with your address, an employee ID.
- Reflections. Windows, mirrors, glasses and phone screens routinely reveal a whole second scene, including the photographer.
- Uniforms and school logos on clothing — a surprisingly direct route to identifying a child's daily location.
How to Redact Properly
- Crop first. If the sensitive element is near an edge, cutting it out is absolute — nothing is left to recover.
- For faces and plates inside the frame, cover with a solid opaque shape or a strong, wide blur. Emoji stickers and blocks work well too.
- Weak blur and mosaic are not safe for text. Pixelated characters can often be reconstructed by matching candidate text against the mosaic pattern; the same logic can partially recover a lightly blurred plate. For anything text-like, use a solid block.
- Flatten and re-check. Export the finished image, then reopen the *exported* file and look again — some editors keep redaction as a separate, removable layer.
Layer 2: What's In the File
Camera photos carry EXIF metadata: GPS coordinates, timestamp, device model, sometimes an owner name. This is how an innocuous garden photo publishes your home address.
Many big platforms strip EXIF when they re-encode uploads — but you shouldn't rely on it: direct file shares (email, chat "send as file", cloud links, your own website) usually preserve everything.
The reliable move is to strip metadata yourself before sharing. A useful side effect: re-encoding a photo through a local compressor or converter drops most metadata as a matter of course, which means "compress before posting" already gives you a privacy win alongside the smaller file. Timing matters as much as location — posting "at the beach" in real time announces that your home is empty; posting after you return doesn't.
The Two-Minute Routine
- Crop away edges you don't need.
- Block out faces, plates and text you can't crop.
- Check reflections and background screens once more.
- Re-encode/strip metadata, rename the file to something neutral, then post.
Do this locally, in tools that process on your own device — the moment before sanitizing is exactly the wrong moment to hand the file to a random server.