All articles
Forensic10 March 2026·6 min read

EXIF vs XMP vs IPTC: Photo Metadata Types Explained

A deep dive into the three main types of photo metadata — EXIF, XMP, and IPTC — what each contains, and why they all matter for privacy.

When we talk about "photo metadata," we're actually referring to several distinct standards that can coexist within a single image file. Understanding the differences matters because removing only one type while leaving others intact can still expose your private information.

EXIF (Exchangeable Image File Format)

EXIF is the most well-known metadata standard and the one most directly tied to privacy concerns. It was developed by the Japan Electronic Industries Development Association and is primarily generated by the camera hardware at the moment of capture.

EXIF data includes camera settings like aperture, shutter speed, ISO, and focal length. It also includes GPS coordinates if location services are enabled, device make, model, and unique serial numbers, date and time of capture accurate to the second, thumbnail previews of the image, and orientation information.

EXIF data lives in the APP1 segment of JPEG files and in specific tags within TIFF-based formats. It's the segment most privacy tools target, but it's not the only place sensitive information hides.

XMP (Extensible Metadata Platform)

XMP was created by Adobe and uses XML formatting to store metadata. It's more flexible than EXIF and can contain a much wider range of information. XMP data often includes editing history and software used, photographer name and contact details, copyright and licensing information, keywords, ratings, and descriptions, and geographic data duplicated from or supplementing EXIF.

XMP is particularly common in photos that have been processed through Adobe Lightroom, Photoshop, or other professional editing software. It can also appear in the APP1 segment of JPEGs alongside EXIF data, making it important to target both during removal.

IPTC (International Press Telecommunications Council)

IPTC metadata was originally designed for news agencies and press photography. It provides standardised fields for editorial information including photographer name and byline, caption and description, location details such as city, state, and country, copyright holder and usage terms, and category and keyword classifications.

IPTC data lives in the APP13 segment of JPEG files. While less common in casual photography, it's frequently present in stock photos, press images, and any photo that's been processed through professional workflows.

Why all three matter for privacy

A common mistake is assuming that removing EXIF data is sufficient. In practice, sensitive information can be duplicated across all three standards. GPS coordinates might exist in both EXIF and XMP. Your name might appear in IPTC and XMP but not EXIF. Editing software might add XMP data that reveals your workflow even after EXIF is stripped.

ExifVoid's binary excision approach removes all three metadata types simultaneously by stripping the relevant JPEG segments (APP1 for EXIF and XMP, APP13 for IPTC) in a single pass. This ensures comprehensive removal rather than partial cleanup.

The bottom line

If you're serious about photo privacy, you need a tool that addresses all metadata standards — not just EXIF. When scanning a photo with ExifVoid, the Privacy Scan report shows you exactly which types of metadata are present and categorises the risk level of each, giving you full visibility before you clean.

Protect your photos now

Scan and remove metadata — free, private, instant.

Try ExifVoid