The Dangers of Online Metadata Removers


Virtually all popular file formats have hidden data & metadata embedded within them. Removing hidden data & metadata from files before sharing them is essential for preventing private and sensitive data leakage.

There are today dozens of online metadata removers, some are free, some are freemium, and some cost money. To use these tools, the entire files need to be uploaded to a remote server on the cloud where the metadata is removed from the files. Typically, the files are uploaded using a secure encrypted connection, but once the files reach the server, they must be decrypted for processing. The processed files are then downloaded from the server.

There are two types of these tools:

  • Browser-based web applications - these have an online web interface that can be accessed by any web browser, (e.g. Chrome, Edge, Firefox), desktop-based or mobile-based, regardless of the underlying operating system. (e.g. Windows, Linux, macOS, Android, iOS) They don't have to be downloaded and installed locally. These are the vast majority.

  • Interface-only native applications - these need to be downloaded and installed on the device locally, but provide only interface whereas the actual processing of the files occurs on a remote server to which the files are uploaded to

Drawbacks of online metadata removers

Both types are not ideal for large files, and browser-based tools are not ideal for batch processing of multiple files across different folders.

However, the main drawback is that using online tools means that anyone who have access to the server will have full access to the uploaded files, data and metadata. Technically, they can do with them whatever they please, including sharing them with others. The owners of these tools typically state that uploaded files are automatically deleted shortly after they are processed, but one can never be certain that this is the case. A rogue employee or a hacker that manages to compromise the server and gain access to it could implant code to silently send uploaded files to another server before they are deleted. Using such tool for processing files with private data could also violate privacy laws and regulations.

Motivations for creating online metadata removers

Assuming the owner of the tool honers their commitment not to keep the files, possible motivations for creating online metadata removers include any combination of the followings:

  1. A willingness to contribute a useful tool to the public

  2. Financial profit from donations, selling access to the tool, or ads

  3. Tracking and profiling users through the use of the user's IP address, tracking cookies, fingerprinting, or usage statistics

  4. Collection of data of value derived from the files, possibly of personal or sensitive nature, possibly with an intent to share the data with third-parties. Such practice might be against the best interests of the user or the public.

The motivations could change over time.

Conclusion

Using any online metadata remover that uploads files to a remote server for processing bears significant inherent privacy risks, and is strongly discouraged. One should prefer a completely offline metadata removal native application that is downloaded and installed locally. With a native application, one can ensure it doesn't access the internet by denying such permission or adding a simple firewall rule to prevent this.

An example of a completely offline hidden data & metadata removal desktop application for Windows® is BatchPurifier™. BatchPurifier™ can remove hidden data & metadata from multiple types of document, image, and media file formats, including Microsoft Office®, (Word, Excel, PowerPoint) LibreOffice®, PDF, JPEG, PNG, WebP, SVG, AVI, WAV, MP3, and MP4. It supports the removal of more than 60 types of hidden data & metadata, including properties, comments, tracked changes, and slide notes. BatchPurifier™ can process thousands of files across different folders at once, with each file size exceeding 1 GB. BatchPurifier™ allows the user to either save the purified files as new files in a specified folder, or to overwrite the original files. BatchPurifier™ integrates with the shell menu, enabling the user to easily send files and folders for purification directly from the Windows file explorer. These features offer the user more comfort, flexibility, and productivity than any web browser-based tool can provide.

Related White Papers