What is PDF Metadata and Why It Is a Privacy Risk

Every PDF you create or receive contains invisible metadata — information embedded inside the file that reveals far more than the visible content. This metadata is transmitted silently whenever you share the file, and most users have no idea it exists.

What Metadata Does a PDF Contain?

PDF metadata is stored in two locations inside the file: the document information dictionary and XMP (Extensible Metadata Platform) data. Together they routinely contain:

• Author and creator name — the full name of the person who created the document, often pulled automatically from the operating system account name.
• Software and version — the exact application and version used to create or last edit the file, such as "Microsoft Word 16.0.17126" or "Adobe Acrobat 23.0".
• Creation and modification dates — precise timestamps showing when the document was first created and every subsequent edit.
• Revision history — some PDFs contain a complete audit trail showing the number of times the document was saved and when.
• GPS coordinates — documents created on mobile devices or exported from photo editing apps can embed the exact GPS location where the file was created.
• Company and organization name — organizational details from the creator's software license registration.
• Printer and driver information — details about the hardware used if the PDF was created via print-to-PDF.
• Internal file paths — the full folder path on the creator's computer, such as "C:\Users\JohnSmith\Confidential\Draft_v3.docx".

Real-World Privacy Risks

Metadata exposure has caused serious problems across journalism, legal proceedings, and corporate negotiations. In a landmark legal case, a law firm's redacted PDF had the full revision history intact, revealing earlier unredacted versions of the document to opposing counsel. A government agency released a public statement PDF with the author's full name and internal network server path visible in the metadata. Security researchers have repeatedly identified anonymous whistleblower sources through author and GPS metadata embedded in leaked documents.

For everyday users, the risks are equally real. Sending a CV that contains the GPS coordinates of your home from when you created it on your phone. Sharing a business proposal that reveals you are using an outdated version of software. Submitting a document for a tender that contains your internal file structure and draft filename.

None of these revelations require any hacking. The information is sitting openly inside the file, readable by anyone who opens File Properties.

How to Remove PDF Metadata Safely

You can view metadata in Adobe Acrobat under File → Properties → Description, but Acrobat's built-in removal tool is not thorough — it does not strip XMP data or embedded revision history. Simply re-saving the file also does not help, as metadata persists through save operations.

The correct approach is to use a tool that rebuilds the PDF document structure from scratch without transferring metadata fields. This is exactly what FixIt Localy's PDF Sanitizer does — it parses your PDF locally in your browser, reconstructs the document content without any metadata, and returns a clean file. Your original document never leaves your device during this process.

Good metadata hygiene is a simple, low-effort habit that meaningfully reduces your digital footprint. It protects sensitive information about yourself, your colleagues, your organization, and the people you work with — without requiring any technical expertise.