# Meta-Data

> [!toc] Table of Contents
>
> <!-- toc -->

Here we describe what metadata is and where it can be found. If you just want to know
how to clean metadata from files, check out our
[recommendations](https://wiki.aktivismus.org/books/it-sicherheit-esc-it/page/clear-metadata).

## The data behind the data

### Metadata in communication

Imagine you are writing a message to someone or talking to a friend on the phone. You
might think, “As long as no one knows the content, everything is fine!” - but that's not
entirely true.

Even without knowing the content, a lot can be found out about you from the metadata.

Metadata is data about your data. In lots of messengers for example, it can reveal:

- Who is communicating with whom
- When and how often you are in contact
- Where you sent a message from
- Which app or device you are using

Metadata can be used to deduce habits and how your everyday life usually looks like.

Contact networks can also be identified in the same way: If person A is in contact with
person B, and person B always immediately writes to C after receiving a message from A,
then C is also connected to A.

IP addresses and location data also belong to the category of metadata. In 2024, for
example, several high-ranking intelligence officials from major NATO countries were
[identified](https://netzpolitik.org/2025/databroker-files-new-data-set-reveals-40000-apps-behind-location-tracking/)
using a commercially available data set because they had used apps and devices that
collected their location data and sold it to so-called data brokers. _(Entire series of
articles in german on [netzpolitik.org](https://netzpolitik.org/databroker-files/))_

It is therefore important to avoid metadata wherever possible.

According to
[Mike Kuketz](https://www.kuketz-blog.de/briar-anonymitaet-und-sicherheit-gehen-vor-messenger-teil8/),
[Briar](https://briarproject.org) is a role model in this regard: “The metadata
generated during use is obfuscated in such a way that it is impossible to trace who was
in contact with whom.”

Signal is also rather sparing with metadata.
[Matrix](https://wiki.aktivismus.org/recommendations/messenger.md#matrix), email, and Delta Chat, on the other
hand, require a lot of metadata to function properly. This metadata is then stored on
[all servers](https://wiki.aktivismus.org/recommendations/messenger.md#how-it-works) with which communication
takes place.

This does not mean that these messengers do not have their advantages, but the
disadvantage of metadata should be kept in mind.

> [!technical] Details about SMTP metadata
>
> Delta Chat uses the old SMTP email protocol. For those who want to delve deeper into
> metadata in SMTP, here are a few resources:
>
> - [Delta Chat](https://delta.chat/en/help#message-metadata)
> - [Email](https://blog.mystrika.com/email-metadata-smtp-headers/)

### Metadata in files

Even simple files often contain metadata. A photo taken with a smartphone, for example,
may even contain the location where the photo was taken _(if the settings are poorly
chosen)_. In addition, the device model, date, time, and similar information are often
included.

PDFs, Word, Excel, and similar files also usually contain a lot of metadata that reveals
the device and operating system used for editing, the creation or editing date, user
name of editor, and similar information.

This becomes a particular problem when files are uploaded somewhere, as the metadata is
also uploaded and can then be viewed by anyone who downloads the file.

> [!tip] {static}
>
> - [GrapheneOS's](https://wiki.aktivismus.org/books/it-sicherheit-esc-it/page/graphene-os) Camera e.g. doesn't store any meta
>   data on photos you take with it, by default.
> - Our recommendations include a list of
>   [tools for cleaning metadata](https://wiki.aktivismus.org/books/it-sicherheit-esc-it/page/clear-metadata).

### Metadata on paper

Yes, unfortunately, even printed paper contains metadata, known as printer dots. These
are tiny yellow dots that some color laser printers use to leave information about the
printer model and print date, which are not visible to the naked eye.

Such dots were presumably
[used to identify](https://en.wikipedia.org/wiki/Reality_Winner#Role_of_The_Intercept)
the US whistleblower Reality Winner.

Until 2017, the civil rights organization Electronic Frontier Foundation had compiled
and maintained
[a list of such color printers](https://www.eff.org/pages/list-printers-which-do-or-do-not-display-tracking-dots).
However, this has since been discontinued because all color laser printers now leave
detectable traces in one form or another.

> [!warning] Warning {static}
>
> Therefore, in highly sensitive cases, no (high resolution) photos of original
> documents should be uploaded. In our recommendations, we describe a
> [possible alternative](https://wiki.aktivismus.org/recommendations/clear-metadata.md#printerdots).