The Dangers of Offline Browser-based Metadata Removers


Virtually all popular file formats have hidden data & metadata embedded within them. Removing hidden data & metadata from files before sharing them is essential for preventing private and sensitive data leakage.

An offline browser-based metadata remover is a type of tool that employs client-side technologies such as JavaScript and WebAssembly to process files locally, within the user's web browser, and it's not necessary for it to upload them to a remote server. It can run on any web browser, (e.g. Chrome, Firefox, Edge) desktop-based or mobile-based, regardless of the underlying operating system, (e.g. Windows, Linux, macOS, Android, iOS) and it doesn't have to be downloaded and installed locally.

There are today dozens of offline browser-based metadata removers. All that are known to us are completely free to use, and some are based on open-source projects.

To use these tools, the files need to be loaded onto the browser app, where the metadata is removed from the files, within the browser, The processed files are then "downloaded" from the browser.

Drawbacks of offline browser-based metadata removers

These type of tools are not ideal for batch processing of multiple files across different folders.

However, the main drawback is that, technically, any browser-based metadata removal tool can upload selected files to a remote server, if it has been designed to do so. It might be designed to do so regularly, or only when certain conditions are met. This is true even if the tool is installed as a progressive web application. (PWA) Even if the tool is based on an open-source project, the user can never be certain that the web-accessible app actually running is, and always will be, built out of that code and nothing else. A rogue employee or a hacker that manages to compromise the server that hosts the app and gain access to it could implant code to silently send selected files to a remote server.

The only way the user can be certain an offline browser-based metadata remover will not send selected files, or data derived from them, to a remote server, is to open the app in an incognito window, turn off the internet connection before selecting the files in the app, and closing the incognito windows before re-connecting to the internet. This is quite a nuisance, and could easily be forgotten.

Motivations for creating offline browser-based metadata removers

Assuming the owner of the tool honers their commitment not to send the files to a remote server, possible motivations for creating offline browser-based metadata removers include any combination of the followings:

  1. A willingness to contribute a useful tool to the public

  2. Financial profit from donations, selling access to the tool, or ads

  3. Tracking and profiling users through the use of the user's IP address, tracking cookies, fingerprinting, or usage statistics

  4. Collection of data of value derived from the files, possibly of personal or sensitive nature, possibly with an intent to share the data with third-parties. Such practice might be against the best interests of the user or the public.

The motivations could change over time.

Conclusion

Using any offline browser-based metadata remover bears significant inherent privacy risks that one should consider. One should prefer a completely offline metadata removal native application that is downloaded and installed locally. With a native application, one can ensure it doesn't access the internet by denying such permission or adding a simple firewall rule to prevent this.

An example of a completely offline hidden data & metadata removal desktop application for Windows® is BatchPurifier™. BatchPurifier™ can remove hidden data & metadata from multiple types of document, image, and media file formats, including Microsoft Office®, (Word, Excel, PowerPoint) LibreOffice®, PDF, JPEG, PNG, WebP, SVG, AVI, WAV, MP3, and MP4. It supports the removal of more than 60 types of hidden data & metadata, including properties, comments, tracked changes, and slide notes. BatchPurifier™ can process thousands of files across different folders at once, with each file size exceeding 1 GB. BatchPurifier™ allows the user to either save the purified files as new files in a specified folder, or to overwrite the original files. BatchPurifier™ integrates with the shell menu, enabling the user to easily send files and folders for purification directly from the Windows file explorer. These features offer the user more comfort, flexibility, and productivity than any web browser-based tool can provide.

Related White Papers