Profile Image Privacy Check

The following process shows how to check whether a specific online service removes any location information from profile images.

This is important particularly as mobile devices more easily enable storing of location information.

This check is important for all services you provide where privacy is a factor, such as student facing services.

 

Preparation

The following steps only need to be done once, they are just to setup the required environment to test.

  1. Download this zip file and note the downloaded location.
  2. Extract the zip and note the location.
  3. Navigate to the extracted location.
  4. Right click on the baseline image and click properties.
  5. Click on the details tab and scroll down.
  6. The GPS coordinates should be shown as below.
  7. In cases where the GPS detail is correctly stripped there will not be a GPS section on the details tab above the file section.

GPS details of image

The specific steps will be different for each service.

  1. Login to or create an account on your desired service
  2. Navigate to the Settings or profile page, Some services denote settings by a gear or similar .
  3. Upload profile baseline profile image.
  4. If the service allows for cropping, avoid cropping. Modifying the image may strip location information that may be otherwise kept.
  5. Download the profile Image.
  6. Check for GPS details above the file section of the image file.

For example

  1. Upload your photo                                                                                                                                                                                                                                                                 Edit your profile
  2. Save profile
  3. Download the saved photo. (If save image is not shown in the right click menu choose inspect element and see page 4 for further details to download the image).

Save Profile Image

 

  1. Observe If GPS details are removed.

Observe details removed

If you use an Apple Mac, Inspector also shows GPS details.

 

Additional tests that can be done if the service allows

 

  1. Crop images to see if editing even slightly removes location data.
  2. Ascertain the exact pixel dimensions used on the platform you are testing and upload an image with those dimensions. If larger or small images are modified on the platform there is an option to strip location. If you upload the exact dimensions there is a greater chance of the platform ignoring and just storing the image and attached gps location.

 

 

 

How to download an image where save image is unavailable.

  1. Right Click on the image and inspect element.

Inspect Element

Click Image location

  1. For the selected link right click and open in new tab. Alternatively, double click, copy and paste image location into a new tab.

Open Link in new tab

  1. Right click and save the image shown in the new tab.
  2. If the Image can’t be retrieved by the above method click on the sources tab in the inspector and go through all the files in the folders listed. The profile image should appear here.