See what your photos give away before anyone else does
Your phone writes the coordinates. Your camera writes a serial number that links every photo you have ever posted. The file keeps a hidden thumbnail that is often still the picture you cropped. InXpoze shows you all of it, reads the house numbers and plates in the picture itself, and gives you a clean copy. Entirely on your own machine.
A photograph carries more than the picture
None of this is visible in any photo viewer. All of it travels with the file when you send it.
Where you were, to the metre
Phones record GPS coordinates precise enough to identify a single house. People assume a location tag is vague. It is not.
What you cropped out
A hidden thumbnail is written when the photo is taken. Crop the picture in an editor that does not update it, and the original framing is still inside the file.
A video you did not know you sent
Motion photos append a few seconds of footage, with audio, after the end of the image. Nothing warns you, and nothing shows it.
A serial number that links everything
Camera and lens serials tie every photo from one device together, across every account and every site, even under a different name.
Names of people in the shot
A desktop photo library writes in the names it recognised. No viewer displays them, and they are rarely removed.
Everything visible in the frame
House numbers, street signs, number plates, a screen in the background. Stripping metadata does nothing about any of it.
A look inside
Real screens from the app.
Two kinds of problem, and only one is metadata
Stripping a file clean does nothing about what is visible in the picture. InXpoze looks at both.
Hidden in the file
Parsed byte by byte rather than handed to an imaging library, so a damaged photo is still readable and every block's exact position is known.
- ✓GPS coordinates, altitude and the satellite timestamp, with the place name resolved offline
- ✓The hidden thumbnail, compared against the photo you can see
- ✓Video, depth maps and anything else appended after the end of the image
- ✓Camera and lens serial numbers, and the device model
- ✓Names of people written in by a photo library
- ✓EXIF, XMP, IPTC, PNG text, maker notes and content credentials
Visible in the picture
Detected on your own machine with bundled models. No cloud service and nothing uploaded.
- ✓Faces, so you can cover the ones that are not the point of the photo
- ✓Street addresses and house numbers read off walls and letterboxes
- ✓Number plates, matched to Australian, UK, US or European formats
- ✓Screens and devices in shot, plus people and vehicles
- ✓Email addresses, phone numbers, payment cards and access keys in screenshots
- ✓Windows user folders, which give away the name the machine is set up under
Three steps, about ten seconds
Drop a photo in
Drag it onto the window, or right-click any image in Explorer and choose Check with InXpoze. Metadata appears instantly; the visual scan fills in behind it.
See what it gives away
A score out of 100, every finding explained in plain English, and one sentence for what a stranger could work out. Click any finding to highlight it on the photo.
Export a clean copy
Cover what you want covered, or pick a share preset. InXpoze writes a new file, strips every metadata block, then re-reads the result to confirm it really is clean.
One photo says where it was taken. Forty say where you live.
Scan a whole folder and InXpoze looks across it. Photos taken repeatedly within a few metres of each other, over many different days, are a place you return to. The biggest such cluster in a personal photo folder is almost always home.
A location is only called a likely home when photos from several different days support it. Twenty photos from one afternoon are an event, not a residence, and saying otherwise would be wrong in exactly the case you are most likely to check.
Strip metadata from every file in the folder in one action. Visual redaction stays per-image, because covering a face is a judgement about that photo.
Covered means covered
A redaction changes the pixels and the image is re-encoded. It is never a shape drawn over the top: an exported file with the original pixels underneath a black box looks perfect on screen and protects nobody.
Anything containing text is always covered with a solid block, whatever style you picked. Blur and pixelation are reversible on text, because the set of possible originals is small enough to search — a four-digit house number has ten thousand candidates, and each one can be rendered, blurred the same way and compared. A face has no such list, so pixelation is a real choice there.
Your original is never modified. Its SHA-256 is shown before and after, so you can confirm that rather than take it on trust.
Blocked, not merely unused
Network access is switched off inside the program itself, at process level, before anything else happens at startup.
| Feature | Contacts | Sends | Default |
|---|---|---|---|
| Update check | github.com | Nothing about you or your photos | On |
| Map view | openstreetmap.org | Only the coordinates you ask to see | Off |
| Everything else | — | Nothing. It cannot reach the network at all | — |
You do not have to believe any of that
Open Settings > About and press Test it now. InXpoze opens a real outbound connection and shows it being refused by its own kill switch. A claim you can watch fail is worth more than a badge.
There is no cloud service, no account and no AI model. Every finding InXpoze reports is produced by code in the repository, and the log records what the app did, never what it saw.
What it reads and writes
| Opens | JPEG · PNG · HEIC / HEIF · WebP · TIFF · BMP |
| Exports | JPEG · PNG · WebP |
| Reports | HTML · PDF |
| Requires | Windows 10 or 11, 64-bit. Nothing else. |
| Installs | One installer. Every library and detection model is inside it: no runtime to fetch, no model to download on first run. |
| Costs | Nothing. No subscription, no account, no paywall. |
What InXpoze cannot promise
It reports what it can detect, and it will miss things. Automatic detection of faces, text, plates and objects is imperfect, metadata can be stored in ways it does not recognise, and no program can tell you everything a particular person might work out from a particular photograph.
Treat the findings as a reason to look more closely, not as proof that an image is safe to publish. Check the exported copy before you share it.
Know what you are sharing
Free, offline, and installed in one step. Check one photo before you post it and you will not look at your camera roll the same way again.
Some anti-virus products or EDRs might block the download of the exe file,
as it is not yet signed with a code-signing certificate. You can download
the zip file as a workaround.
Direct link to the exe: InXpozeInstaller.exe
Direct link to the zip: InXpozeInstaller.zip