Scrub - or cleverly poison - photo metadata before you share, on iOS and Android
Exifuscator is a free, open-source mobile app for iOS and Android built to clean photo metadata before sharing. Every photo carries a quiet block of EXIF data - GPS coordinates, timestamps, device and lens details - and sharing the photo shares that diary entry too. The app hooks into the share sheet, so you can process a picture straight from the camera roll without opening the app first. It is in beta and currently distributed as source you build yourself with Expo; there is no app store listing yet.
Two modes cover two philosophies. Scorched Earth strips everything - EXIF, XMP and ICC profiles - leaving a genuinely zero-metadata file. Ghost mode is sneakier: instead of deleting, it poisons. GPS coordinates get randomized jitter within a radius you choose, timestamps are shifted, and the device signature is swapped for a spoofed profile. The photo still looks normal and still carries plausible metadata - it just politely lies.
The Digital Fingerprint viewer audits exactly what was hiding in the file, before and after processing: GPS tags, lens specifications, device identifiers. Everything runs on-device under a zero-cloud architecture - the privacy policy states no collection, no storage, no transmission, no third-party SDKs, no analytics and no trackers. Apache-2.0 licensed, wrapped in a dark tactical interface. The focus is photos; video metadata is a different adventure.
Our article explains the appeal: https://www.freewares.org/blog/exifuscator-photo-metadata-privacy
Process photos straight from the camera roll
Strips EXIF, XMP and ICC profiles completely
Poisons metadata instead of deleting it
Randomizes coordinates within a radius you choose
There is no app store listing yet. The project is in beta and distributed as open source: clone the repository and build it with Expo for iOS or Android.
Scorched Earth deletes everything - EXIF, XMP and ICC profiles. Ghost mode keeps plausible metadata but poisons it: jittered GPS, shifted timestamps and a spoofed device profile.
No. Everything is processed on-device. The privacy policy states no collection, no storage, no transmission, no third-party SDKs and no analytics.