What is hiding in a “normal” photo
A JPEG from a phone is a picture plus a directory of tags: GPS coordinates (often to a few meters), altitude, capture time, time zone, camera make and model, lens, sometimes a serial number, sometimes the name you entered in the camera owner field, and the software that last saved it. PNG is lighter but can still hold tEXt chunks, timestamps, and profiles. WebP can carry EXIF and XMP as well. Social networks strip some of this on upload and not all of it, and they do it after the file has already crossed their servers. Marketplace apps and email do not reliably strip GPS. If you email a photo of a receipt on your kitchen table, you may also be emailing your home coordinates.
Stripping metadata is the act of writing a new image file that contains the pixels (and maybe an ICC profile) without those tags. It is not encryption and it is not anonymization of the pixels themselves. A recognizable storefront is still a recognizable storefront. Faces are still faces. This tool does not blur number plates. It removes the hidden fields people forget.
Why a browser tool is the right place to do it
Many “EXIF removers” ask you to upload the photo to a server, which is a poor joke: you just sent GPS to a stranger in order to delete GPS. ToolPin re-encodes in the tab. The file does not go to toolpin.online. You download a clean copy. Keep the original in a private album if you still want the map pin for your own travel log.
Re-encoding has a cost. JPEG will be decoded and saved again, so you may see a slight quality shift and a different file size. That is the trade for a copy that no longer carries the APP1 EXIF segment. If you need a truly lossless JPEG EXIF strip, specialized tools can rewrite segments without touching MCU data; a canvas-based web tool generally cannot. For privacy before a public post, re-encode is the standard, acceptable approach. For a forensics archive, do not re-encode—work on a copy with a dedicated EXIF editor.
PNG and WebP similarly lose ancillary chunks on canvas write. Color may be flattened to sRGB. That is correct for the web. Print workflows that needed a rare profile should strip with a tool that can keep the ICC and drop only GPS.
What this does not remove
Writing on the image, watermarks, faces, screenshots of chat names, and reflected documents in a mirror are in the pixels. Crop them or redact them separately. Thumbnail EXIF (a tiny preview inside the JPEG) usually goes away with a full re-encode, which is good—old thumbnails have leaked uncropped versions before. Maker notes that some cameras bury may or may not all vanish; a second pass through a dedicated inspector (exiftool on your machine) is wise for high-risk files.
Limits on ToolPin
JPG, PNG, and WebP, up to 250 MB, in the browser, no signup, no watermark. Very large files follow the same memory rules as other image tools. After you strip, verify with an inspector if the stakes are high: “Properties” on Windows, “Get Info” on a Mac, or a local EXIF viewer. Then upload the cleaned file, not the original sitting next to it in Downloads.
Pair with crop (remove a house number in the frame), resize (do not ship 12 MP of someone’s street), and compress (smaller files for the post). Privacy is a stack, not a single button.