EXIF vs XMP vs IPTC: Photo Metadata Types Explained

Photos contain three distinct types of metadata: EXIF (camera settings, GPS, device info), XMP (editing history, creator details, keywords), and IPTC (editorial information, copyright, captions). All three can coexist in a single image file, and removing only one type while leaving others intact can still expose your private information. A thorough privacy cleanup requires stripping all three.

What is EXIF metadata?

EXIF (Exchangeable Image File Format) is the most well-known metadata standard and the one most directly tied to privacy concerns. Developed by the Japan Electronic Industries Development Association, it is generated by camera hardware at the moment of capture.

EXIF data typically includes camera settings (aperture, shutter speed, ISO, focal length), GPS coordinates if location services are enabled, device make, model, and unique serial numbers, date and time of capture accurate to the second, thumbnail previews, and orientation information.

EXIF lives in the APP1 segment of JPEG files and in specific tags within TIFF-based formats. It is the segment most privacy tools target — but it is not the only place sensitive information hides.

What is XMP metadata?

XMP (Extensible Metadata Platform) was created by Adobe and uses XML formatting to store metadata. It is more flexible than EXIF and can contain a much wider range of information, including editing history and software used, photographer name and contact details, copyright and licensing information, keywords, ratings, and descriptions, and geographic data duplicated from or supplementing EXIF.

XMP is particularly common in photos processed through Adobe Lightroom, Photoshop, or other professional editing software. It can appear in the APP1 segment of JPEGs alongside EXIF data, or as a separate sidecar file (.xmp) in professional workflows.

What is IPTC metadata?

IPTC (International Press Telecommunications Council) metadata was originally designed for news agencies and press photography. It provides standardised fields for editorial information including photographer name and byline, caption and description, location details (city, state, country), copyright holder and usage terms, and category and keyword classifications.

IPTC data lives in the APP13 segment of JPEG files. While less common in casual smartphone photography, it is frequently present in stock photos, press images, and any photo processed through professional workflows.

How do the three types compare?

EXIF is generated automatically by camera hardware and contains GPS, device identity, and camera settings. XMP is generated by editing software and contains editing history, creator info, and rights management. IPTC is added manually or by newsroom software and contains editorial information, captions, and credits.

The key privacy concern is that sensitive data can be duplicated across all three. GPS coordinates might exist in both EXIF and XMP. Your name might appear in IPTC and XMP but not EXIF. Editing software might add XMP data revealing your workflow even after EXIF is stripped.

Why does this matter for privacy?

A common mistake is assuming that removing EXIF data alone is sufficient. Many basic metadata removal tools only target EXIF and leave XMP and IPTC untouched. This means your name, location, and editing details could survive what you thought was a thorough cleanup.

ExifVoid removes all three metadata types simultaneously during the cleaning process. When you scan a photo, the Privacy Scan report shows you exactly which types are present and categorises the risk level of each, giving you full visibility before you clean. For businesses handling customer photos under GDPR, our guide to GDPR and photo metadata covers the compliance requirements.

Frequently asked questions

Which metadata type is most dangerous for privacy?

EXIF poses the highest immediate privacy risk because it contains GPS coordinates and device serial numbers — data that can directly identify your location and link photos to a specific device. However, XMP and IPTC can contain your name, contact information, and editing history, which are also sensitive.

Do smartphones create all three types?

Smartphones primarily generate EXIF data. XMP and IPTC are typically added by editing software or professional workflows. However, some gallery apps and editing tools on phones can add XMP data, so it is worth checking with a tool like ExifVoid even for casual phone photos.

Can metadata survive file format conversion?

Converting a file between formats (e.g., JPEG to PNG) may strip some metadata types but not all. The safest approach is to explicitly remove metadata using a dedicated tool rather than relying on format conversion as a privacy measure.