When you upload a photo to a search tool, it usually leaves your device, passes through the website's server and is sent on to a search provider, and each of them can have its own retention rules. Before uploading, check who receives the photo and how to get it deleted, send a copy with location metadata and unrelated details removed, and avoid shared devices and broad-permission browser extensions for anything sensitive.
This guide covers what happens to an upload, a checklist to run before you send one, how to read and remove photo metadata on each major device, and the extra risks of shared computers and extensions.
Where an uploaded photo actually goes
An upload button hides several steps. For a typical reverse image or face search:
- Your browser or app sends the file to the website you are using. The whole file goes, including any embedded metadata, unless the site strips it.
- The website may pass it to a separate search provider. Many search apps and sites do not run their own index; they send your photo to someone else's.
- The provider processes it and may keep the upload, a derived face template, or logs for a period set by its own policy.
- Results come back as thumbnails and links. The site may save these to your account or a shareable report.
- When you open a result, you visit a third-party website with its own tracking and privacy practices.
The important consequence: a promise from the website you see does not cover what an upstream provider does. Read both policies when the photo is private. And deleting the file from your own phone, or closing the tab, does nothing to a copy that has already been sent.
How Facehunch handles your photo
Here is how Facehunch handles the photo, in plain terms:
- Selecting a photo shows a local preview. Nothing is sent until you consent and start a search.
- When the search starts, the selected file is sent to our search provider for the search.
- After the search completes or is cancelled, Facehunch requests removal of the photo from the search provider. A network failure can stop that request from going through, and what the provider retains is governed by its own policy.
- The results (source links, similarity scores, thumbnails and report details) are saved to your account so you can reopen the report.
- Facehunch does not strip metadata for you, so prepare a clean copy before selecting the file.
The privacy policy has the current details.
Checklist before you upload
Run through this every time the photo is anything other than a public picture.
| Check | What to look for | If it fails |
|---|---|---|
| Operator | A named company, contact route and privacy notice | Use a different tool |
| Provider | Whether the site says whose index it uses | Assume a third party receives the photo |
| Retention | How long uploads are kept and whether they are used for anything else | Do not upload anything sensitive |
| Deletion | A way to delete the upload or request removal | Avoid uploading private photos |
| Public pages | Whether searches or results become public or shareable | Use a tool that keeps results private |
| The file itself | Location metadata, other people, documents, screens | Make a clean sharing copy (below) |
| Your right to upload | Is it your photo, or one you have a legitimate reason to check? | Do not upload another person's private image |
Two principles sit behind the table. First, send the minimum: for a search about your own face, one clean portrait is enough; you do not need the full group photo. Second, a browser's "allow access to photos" prompt is about your device, not about the service's storage policy. If the terms are unclear and the file is sensitive, stop and choose another route. Never upload intimate images or identity documents to test a tool.
Choosing a trustworthy service is covered in more depth in how to choose a reverse image search tool.
What photo metadata can reveal
Most photos carry EXIF metadata embedded in the file. Phone photos in particular can include:
| Field | What it reveals |
|---|---|
| GPS latitude and longitude | Where the photo was taken, often to within metres, which can be your home |
| Date and time taken | When you were there |
| Device make and model | What phone or camera you use |
| Lens, exposure, flash | Usually harmless, but helps link photos to the same device |
| Software | Which app edited or exported the file |
| Owner or author name | Sometimes set by cameras or editing software |
Some things to know:
- Screenshots usually carry no GPS data, but they show whatever was on screen.
- Many large social platforms remove most embedded metadata from the copy they display publicly, but email attachments, cloud-share links, messaging "send as file" options and direct file transfers often keep it.
- File dates can mislead. A "created" date may be when you downloaded or exported the file, not when it was taken. Missing metadata is common and does not prove a photo was edited.
- Metadata in the file is separate from information on the post. A location tag you add to an Instagram post, or a caption, stays even if the file is stripped.
How to read a photo's metadata
Check the exact file you plan to upload, not the original in your library.
- iPhone or iPad: open the photo in Photos and swipe up, or tap the info (i) button. You will see the date, device, camera settings and a map if location is attached.
- Android (Google Photos): open the photo and swipe up for details, including date, device and location if present.
- Mac: open the file in Preview, choose Tools > Show Inspector, and look at the info tab, which has EXIF and, where present, GPS sections. In Photos, select the image and press Command-I.
- Windows: right-click the file, choose Properties, then the Details tab. GPS appears there if present.
- Any computer, command line: the free tool ExifTool shows everything with
exiftool photo.jpg.
How to remove location and other metadata
Always keep your original and make a separate sharing copy, then check the copy again with the steps above.
iPhone and iPad
- To share without location: select the photo, tap Share, tap Options at the top of the share sheet, and turn off Location. Turning on "All Photos Data" does the opposite, so leave it off.
- To remove location from the photo itself: tap the info button, then adjust the location and choose to remove it. Labels differ between iOS versions.
- To stop recording location in future: Settings > Privacy & Security > Location Services > Camera > Never.
Apple's guide to managing location metadata in Photos covers these options for each version.
Android
- In Google Photos, open the photo, swipe up and edit or remove the location shown in the details. Google Photos also has a sharing setting that removes location from items shared by link; menu labels vary by version.
- To stop tagging future photos, turn off location or location tags in your camera app's settings.
Mac
- Preview: Tools > Show Inspector, open the GPS section of the info tab and click "Remove Location Info", then save.
- Photos: when exporting with File > Export, leave the "Location information" option unticked.
Windows
Right-click the file, choose Properties > Details, click "Remove Properties and Personal Information", then choose "Create a copy with all possible properties removed". Windows saves a new copy and leaves the original alone.
ExifTool (Mac, Windows, Linux)
exiftool -gps:all= photo.jpgremoves only location data.exiftool -all= photo.jpgremoves all metadata.
ExifTool keeps a backup named photo.jpg_original. Upload the cleaned file, not the backup.
What metadata tools cannot remove
A perfectly stripped file can still give away more than you intend. Before uploading, look at the picture itself:
- Text in the background: addresses on envelopes or parcels, house numbers, school or workplace badges, car number plates.
- Location clues: a recognisable front door, a street sign through a window, a view from a balcony.
- Other people: friends, children or strangers who did not agree to be searched. Crop them out.
- Screens and screenshot edges: notifications, chat names, email addresses, battery and carrier details, other open tabs.
Cropping removes these from view but does not remove metadata, and stripping metadata does not remove what is visible. Do both. If you are keeping the photo as evidence, preserve an untouched original separately and never use an AI editor to fill in or "enhance" details; preparing a screenshot for search shows how to crop without losing what matters.
Searching on a shared or borrowed device
A family computer, work laptop or library PC can leak more than the search itself. The upload is sent once; the local traces stay for the next person.
- Prefer your own phone or computer for anything sensitive. On a device you do not trust (for example one that might have monitoring software), no cleanup is enough.
- Use a private window or a guest profile so the browser does not keep history, cookies or form data. This reduces local traces only; it does nothing to what the provider receives.
- Do not save passwords or card details when the browser offers to.
- Watch where files land. Check the Downloads folder, the desktop and the screenshots folder afterwards, and empty the recycle bin or trash if you deleted something there.
- Check sync. Files saved on a shared Mac or PC may sync to a shared iCloud, Google or OneDrive account and appear on other devices.
- Sign out of the search service and any email you used, then close the private window.
- Keep your notes somewhere you control, not in a shared notes app or a family cloud folder.
Browser extensions for image search
Image search extensions add a right-click "search this image" option. The convenience comes with a cost: many request permission to "read and change all your data on all websites", which means the extension can see every page you visit, including your email and banking.
Before installing one:
- Check whether you need it at all. Chrome already offers "Search with Google Lens" on any image. Most engines work fine in a normal tab.
- Read the operator. A familiar search engine's name or logo in the title does not mean the extension is official. Check the developer and its privacy policy on the store listing.
- Limit access. In Chrome, go to chrome://extensions, click Details on the extension, and set Site access to "On click" so it only runs when you ask. In Firefox, open about:addons and review the extension's Permissions tab.
- Remove what you no longer use. Extensions can change ownership and receive updates you did not review.
For one occasional search, use the website. For daily source checking, an extension from a trusted operator with restricted site access is reasonable.
After the search
Privacy does not end when results appear:
- Results are leads, not a dossier. Do not collect unrelated personal details about anyone who appears in results, and do not use a face search to identify strangers or find where someone lives.
- Opening result pages is not anonymous. The sites you visit can log your visit like any other.
- Clean up your account. Delete saved searches or reports you no longer need, where the service allows it.
- If you found your own photos where you do not want them, ask the site to remove them, then ask search engines to drop them. Our guides to removing images from search results and running a digital footprint audit walk through both.
Written by Facehunch with AI assistance and checked against the cited sources. Our editorial policy.