PDF Metadata Privacy Risks — Hidden Data You Should Remove

What Metadata Is Embedded in a PDF?

• Author: Typically the name associated with the software license used to create the file. This is often the creator's full name or their Windows/macOS username.
• Title and subject: May contain the internal project name, client name, or document identifier — information intended for internal use that can leak externally.
• Creator and producer: The software used to create the original document (e.g., Microsoft Word 2021) and the software that produced the PDF (e.g., Adobe PDF Library 15.0). This reveals your software stack to anyone who checks.
• Creation and modification dates: Precise timestamps showing when the document was first created and last modified. These can contradict claims about when a document was prepared.
• Keywords and custom properties: Some organizations add internal classification tags, project codes, or tracking identifiers to metadata fields.
• XMP metadata: An extensible XML-based metadata format that can contain detailed information including editing history, thumbnail images, and custom data from creative software.

Real-World Metadata Privacy Incidents

In 2003, the British government published a dossier on Iraq's security infrastructure as a PDF. Metadata analysis revealed that portions had been copied from a graduate student's thesis, contradicting claims that the information came from intelligence sources. The author names and editing history were plainly visible in the file's properties.

In corporate contexts, metadata leaks are common but less publicized. A company sends a proposal to a client, and the client discovers from the metadata that the document was originally created for a different client — revealing that the proposal is recycled and the pricing may not be tailored. An employee sends a "final" version of a contract, but the metadata shows it was modified after the supposed finalization date. These scenarios damage trust and credibility.

How to Remove Metadata from a PDF

1. Open the PDF Metadata tool. Navigate to yourpdf.tools/pdf-metadata. The tool runs entirely in your browser.
2. Load your PDF. Drag the file into the upload area. No server upload occurs — the file is read locally.
3. Review the current metadata. The tool displays all embedded metadata fields so you can see exactly what information the file contains.
4. Remove or edit metadata fields. Clear the author, title, subject, keywords, and any custom fields that should not be shared externally.
5. Download the cleaned PDF. The output file has the metadata stripped. The visible content is unchanged.

When Metadata Removal Matters Most

Any PDF leaving your organization should have its metadata reviewed. This is especially critical for legal filings (where metadata can be used against you in discovery), client-facing proposals (where author names and revision dates reveal internal processes), public documents (where anyone can inspect the metadata), and documents shared with competitors or adversaries.

For internal documents, metadata is generally less of a concern and can even be useful for tracking document provenance and authorship. The key distinction is internal versus external: keep metadata for internal tracking, strip it before external distribution.