There is an unwritten rule among hikers, and it goes something like this: you don't talk about the good spots. You find a waterfall that isn't on any tourist map, a ridge with a view that makes you want to cry happy tears, or a campsite so perfectly sheltered that you half-expect woodland creatures to hand you a cup of coffee. And then you guard that knowledge like a dragon with a hoard. You tell maybe two people. People you trust with your life, or at least with your preferred sleeping bag.
And then you post a photo of it on Instagram.
Not the location, obviously. You're not a rookie. You turn off the location tag in the Instagram settings. You caption it something vague like "the best weekend" with a leaf emoji and feel smugly responsible. What you did not think about was the tiny invisible file attached to your JPEG that quietly, cheerfully, contains the exact GPS coordinates, the altitude, the timestamp, and the specific camera model you used to take it. That data travels with the photo everywhere it goes.
The Secret Life of EXIF Data
Every photo taken on a modern smartphone or camera comes bundled with something called EXIF data, short for Exchangeable Image File Format. Think of it as a little autobiography that your camera writes about every single shot. It includes the date and time, shutter speed, aperture, ISO settings, the camera make and model, and, if your phone's location services were on, the precise GPS coordinates of where you were standing when you pressed the button.
This data is genuinely useful in many contexts. Wildlife researchers use GPS coordinates to track sightings. Geologists use photo timestamps for field documentation. Professional photographers use EXIF data to review what settings produced a great shot. But when you share that photo publicly? All of that information is still in the file, readable by anyone with a free EXIF viewer, a basic Google search, or just enough curiosity and time.
A study from researchers at the University of Bath found that GPS data embedded in photos posted to public social media accounts can be used to map a person's home location, daily routine, and frequently visited places with alarming accuracy. Your scenic waterfall photo isn't just a photo. It's a breadcrumb.
The Outdoor Photography Privacy Problem Nobody Talks About
The hiking and outdoor photography communities have a complicated relationship with this. On one hand, photographers genuinely love sharing their work. On the other hand, the phenomenon of "Instagram ruined it" is real and well-documented. Hanging Lake in Colorado required a permit system after social media exposure caused visitor numbers to jump over 400 percent in a few years. Wave Rock formations get trampled. Hidden beaches become crowded. Quiet forest clearings become picnic hotspots.
This isn't about blame. It's about understanding that a shared photo carries more information than most people realize. And it's not just about fragile ecosystems.
Rare bird watchers have reported that GPS-tagged photos of nesting sites, shared innocently on birding forums, have been used by egg collectors to locate and raid active nests. The photographers had no idea their images were doing this. They stripped the location from the caption. They forgot about the metadata.
Archaeologists have similar concerns about shared field photos. An enthusiastic hobbyist posts a gorgeous image of a surface scatter of Roman pottery shards. The location is in the EXIF. Within weeks, the site has been disturbed by someone with a metal detector and no authorization.
How to Check What Your Photos Are Actually Sharing
You can check your own photos right now. On a Mac, open a photo in Preview, click Tools, then Show Inspector, then the little camera icon. On Windows, right-click a photo, go to Properties, then Details. You will likely see a section labeled GPS with latitude and longitude coordinates. Paste those into Google Maps and watch it zoom straight to your exact location.
Startling, right?
A lot of social media platforms strip EXIF data automatically when you upload, which is genuinely helpful. But a lot of them don't, particularly when you share files directly through messaging apps, email, or file-sharing platforms. WhatsApp, for a long time, passed EXIF data through in full. Telegram has similar quirks depending on how you send the file. AirDrop shares files completely intact. Direct file downloads from websites preserve everything.
If you email a photo to a hiking group, post it in a Discord server, or share it via Google Drive, the metadata almost certainly travels with it.
Stripping the Data Before You Share
The fix is simple, quick, and free. Before sharing any photo that contains sensitive location information, run it through COMBb2's metadata stripper. It removes EXIF data, GPS coordinates, camera make and model, timestamps, and any other embedded information in seconds. The photo looks identical. The file just stops telling the world where it was taken.
The particularly nice thing about how this works is that the processing happens entirely in your browser. The photo never leaves your device, never touches a server, and never gets logged anywhere. For a tool specifically designed to protect your location privacy, that architecture matters. It would be slightly awkward if stripping your GPS data required uploading your GPS data to a third-party server.
The workflow takes about fifteen seconds per photo. Open the tool, drag in the image, strip the metadata, download the clean version. Done. Your secret campsite stays secret.
A Few Other Situations Where This Matters
Trail photographers are the most obvious use case, but they're far from the only one. Here are a few others worth considering:
- Foragers and mushroom hunters - the mushroom-hunting community has an almost cult-like secrecy around good foraging spots. If you photograph your haul in the field before moving it, that photo knows where you were.
- Backcountry skiers and snowboarders - powder stash locations are treated like family secrets. EXIF data doesn't respect that tradition.
- Wildlife photographers - photographing denning sites, nesting birds, or rare mammals and sharing those images with GPS intact can draw unwanted attention from people whose interest in the animals is less benign.
- People selling outdoor gear secondhand - a photo taken at home, posted to a selling platform that preserves EXIF data, can reveal your home address. This one has nothing to do with secret hiking spots and everything to do with basic personal safety.
For the last scenario, you might also want to check out the compression tool to keep file sizes manageable for marketplace listings, and background removal if you want to photograph gear indoors without your living room appearing in the shot. Both of which, incidentally, also process everything locally without uploading your images anywhere.
The Bigger Picture
Digital photography has given everyone access to images of extraordinary beauty and quality. The same technology has made it trivially easy to share information we didn't intend to share, with people we didn't intend to share it with, about places we actively wanted to keep quiet.
The awareness gap is the real problem. Most people who geocode their secret waterfall into a public photo don't know they're doing it. They're not careless. They just didn't know the camera was quietly writing a travel diary in the background of every shot.
The good news is that closing that gap takes about fifteen seconds per photo. The waterfall stays yours. The nesting osprey stays undisturbed. Your carefully guarded chanterelle patch remains your chanterelle patch. The metadata stripper is a small tool doing a quietly significant job.
Conclusion
Your photos are beautiful. They deserve to be shared. But the GPS coordinates embedded in them don't need to come along for the ride. Before you share any photo taken somewhere you'd rather keep to yourself, spend fifteen seconds with COMBb2's Strip Metadata tool and remove the invisible data that could undo months of careful secret-keeping. The best spots stay best when fewer people know exactly where they are.
Try it yourself
Free, private, runs in your browser. No sign-up required.
