# Checking metadata in a saved export

Checked 5 September 2026 with Chrome 152.0.7977.77 on macOS. These are synthetic test pictures and clips, not anyone's family photos.

We supplied a JPEG with EXIF/GPS, device/date, XMP and comment fields, plus MP4 and WebM clips with location, title, device, date and track labels. We ran the app's image export and its two video export paths, then inspected the saved bytes and the video containers with ffprobe. ffmpeg also decoded the files and checked that the videos retained audible audio.

All five cases passed: the supplied personal tags were absent. Picture dimensions and playback information remained. The video exports still contained sound; this test did not remove speech or visible location clues. The report lists the original and exported formats, browser capabilities and hashes of the source files at inspection.

[Download the test report](/privacy/metadata-export-check-2026-09-05.json) · [Download the synthetic before/after files](/privacy/metadata-export-examples-2026-09-05.zip)

## Read an example

Inside the ZIP, `before/tagged.jpg` is the supplied picture and `after/export.jpg` is the saved output. `before/tagged.mp4` and `before/tagged.webm` are the supplied videos. The four files in `after` whose names begin `fast-` or `realtime-` are the exported videos. The source tags contain the obvious marker PRIVACY_FIXTURE; the dates and coordinates are test values.

The report's `format.tags` and video/audio `streams` show what ffprobe could read in each output. No marker, supplied date or supplied location appeared. Byte checks additionally searched for source EXIF/XMP and QuickTime metadata. This checks these formats and examples; absence of these fields does not prove every possible identifying field is absent from every file.

For a normal family photo, start by opening the actual saved copy's information panel on your device. If it has a location you didn't intend to share, stop and deal with that copy. An empty panel is not a full metadata report.

## Scope

This run did not test iPhone, Android, Safari, Firefox, cloud-library import/export, social-platform uploads, every codec or malicious files. It did not test recognition or reconstruction of faces. The repository diagnostic is `apps/frontend/scripts/censor-export-metadata.mjs`; this report is dated evidence, not a claim that later software versions were tested.