The Marketplace Privacy Blueprint

Key Technical Takeaways

• Raw JPEG and HEIC photos from iPhones and Android devices contain unencrypted EXIF, TIFF, and GPS metadata headers.
• Location coordinates are accurate to within 3 meters, revealing your exact home address, floor altitude, and photo timestamp.
• While some platforms strip metadata during upload, buyer messaging apps, Craigslist direct attachments, and email exchanges routinely send the raw file intact.
• Client-side canvas re-encoding strips 100% of EXIF markers without sending your item photos to third-party web servers.

The Hidden Danger of Selling Items from Home

When you list a high-value item — such as an electric bicycle, designer watch, gaming PC, or musical instrument — on classified sites like Craigslist, Facebook Marketplace, OfferUp, or Gumtree, you take photos of the product in your living room, garage, or backyard.

Unbeknownst to most sellers, modern smartphone cameras automatically tag every shutter click with high-precision satellite positioning data from GPS, GLONASS, and Galileo constellations, alongside local Wi-Fi triangulation.

If a potential buyer asks you to send higher-resolution photos over email, iMessage, WhatsApp (sent as "Document"), or Discord, the original file is delivered with complete geographic coordinates embedded.

What is Stored in Photo EXIF Data?

Exchangeable Image File Format (EXIF) is an industry standard that embeds diagnostic capture parameters inside the image container. Key metadata fields include:

• GPSLatitude, GPSLongitude, and GPSAltitude: Pinpoints exact geographic position and elevation.
• GPSTimeStamp & DateTimeOriginal: Records the exact second the photo was taken.
• Camera Make, Model & Serial Number: Ties multiple listings across different platforms to the same physical phone.
• Unique Image ID & Lens Profile: Fingerprints your specific device hardware.

Why You Cannot Trust Marketplace Platforms to Scrub GPS

Many online sellers assume that platforms automatically sanitize photos. While Facebook Marketplace re-encodes photos in public gallery listings, critical gaps remain:

1. Direct Messaging: When buyers ask for detailed photos of serial numbers or damage, sellers often send them via email or cloud links (Google Drive, Dropbox), which retain all EXIF tags.

2. Platform Bugs & Rollbacks: Social media networks have experienced regression bugs where metadata stripping pipelines temporarily failed, exposing user locations to API scrapers.

3. Secondary Classifieds: Independent classified boards and forum buy/sell threads do not transcode images, hosting the raw unstripped JPEG directly on public CDNs.

Real-World Risks: Targeted Burglaries and Stalking

Criminal syndicates actively monitor marketplace listings for valuable gear (motorcycles, luxury watches, high-end camera equipment).

Instead of arranging a public meeting or paying for the item, thieves extract the GPS coordinates from listing images or requested extra photos, locate the seller’s residence on Google Street View, and execute targeted residential break-ins while the seller is away.

Furthermore, solo sellers — particularly women selling clothing or personal items — face severe stalking risks when prospective buyers pinpoint their home address before initiating a chat.

How to Scrub GPS Metadata Instantly in Your Browser

The safest hygiene is to sanitize photos locally before they ever enter a chat or listing upload form.

MaskMyBody operates entirely client-side. When you drop a photo:

1. Our EXIF scanner reads the JPEG markers (APP1/Exif) or HEIC metadata in volatile browser memory and displays an instant threat summary (latitude, longitude, camera model).

2. MaskMyBody draws the image pixels onto an isolated HTML5 `<canvas>`. Canvas rasterization naturally discards all auxiliary metadata containers.

3. Clicking "Export Clean Photo" generates a pristine new image blob containing only pure image pixels. No GPS coordinates, timestamps, or hardware serial numbers remain.

Research & Engineering FAQ