← Back to Blog

EXIF Is the Least of It

Stripping metadata is standard practice now, and honestly, it should be. A phone photo that goes up with its EXIF intact is handing over the exact coordinates, the device model, sometimes the device name. That's not analysis. That's reading.

But here's what people get wrong. They think metadata is the location story. It isn't. It's the cover sheet. The actual record of where a photo was taken is written into the pixels themselves, in light, and light obeys math. The sun was somewhere specific when that shutter fired. A mountain ridge has a profile as distinctive as a fingerprint. A utility pole in the background was installed to somebody's engineering standard. None of that cares whether you scrubbed the EXIF.

An investigator who knows this isn't looking at the subject of the photo. The subject is the least interesting thing in the frame.

The Sun Does Not Move at Random

This is the part that surprises people, so let's be plain about it. The sun's position in the sky, its angle and its bearing, is a fixed calculation. Give me a date, a time, and a set of coordinates, and I can tell you exactly where the sun was. Give me a shadow in a photo and I can run the math backward.

Here's the workflow. A target posts a selfie next to a brick wall. Nobody can place the wall. It looks like every other brick wall. But there's a fence post in frame, or a window frame edge, or a street sign pole, and it casts a shadow. That shadow has three measurable properties: length, direction, and sharpness. Length and direction are the money data.

Measure the shadow against the object casting it. If the post is roughly a meter and a half and the shadow runs two meters at a bearing you can estimate against the frame, you now have a sun elevation and azimuth pair. Tools like SunCalc exist precisely for this: plug in a candidate location and a date, and it draws the sun's path across the sky for that spot on that day. Adjust until the calculated shadow matches the photographed shadow.

The result is not an address. It's a band. Solar geometry constrains longitude hard and latitude softer, and the date range tightens with the season. In winter, when the sun rides low and swings wide, a single shadow measurement can nail down the time of day inside a window of well under an hour. Stack two measurements from different objects at different angles and the band closes further. How close? Close enough that a second, independent indicator almost always finishes the job.

One caution that matters: mirrored images flip shadow bearings. People mirror selfies constantly, front camera preview style. An analyst who forgets to check for a flipped image will calculate a bearing 180 degrees off and confidently place their target on the wrong side of a continent. Check the text in frame first. Text reads correctly, the geometry reads correctly.

The Infrastructure Tells on Itself

Power grids are built to local standards, and those standards vary more than most people imagine. The shape of a utility pole, the number of crossarms, how the insulators sit, whether the distribution lines run overhead at all: all of it narrows by country, and often by state, and sometimes by the individual utility company serving a county.

Wooden poles with stacked crossarms read North American. Concrete poles with bracket-mounted hardware read European, with the details varying by region. Pylon design (the big lattice transmission towers) is even more regional: the tower geometry, the conductor arrangement, the way the lines sag between spans. People photograph these things by accident every single day. A pylon in the background of a "guess where I am" post is not decoration. It's a survey marker.

None of this requires exotic tooling. It requires knowing that the variation exists and looking. The Electric Distribution side of OSINT is underused precisely because it feels too mundane to matter. It matters.

Ridgelines Have Names

A mountain silhouette looks generic until it isn't. Ridges have profiles, depth, spacing, peaks in a specific order. Software like PeakVisor takes a skyline from a photo, calculates the terrain profile it implies, and matches it against global 3D elevation data. A photo that shows "some mountains behind a parking lot" can resolve to a specific trailhead if the skyline is distinctive enough.

Season adds another layer. Snow line, tree color, how high the vegetation sits on the slopes: all of it constrains the time of year, which folds back into the solar calculation and sharpens everything. A photo that looks like it could have been taken anywhere in the world, six months of the year, usually can't survive both tests at once.

The Reflection Sees What the Camera Didn't

This is the technique that feels like cheating and isn't. Curved reflective surfaces (car chrome, sunglasses, a shop window at the edge of frame) capture a wide-angle, distorted view of everything behind and beside the camera. Warped is not the same as unreadable. Unwarp a reflection and you can pull street signs, storefront lettering, vehicle models, the color scheme of a building across the street. Details that were never in the camera's direct line of sight at all.

Sunglasses are the classic case because people wear them in exactly the kind of casual outdoor photos that get posted without a second thought. The reflection in the lens is a full scene. Low resolution, yes. Full scene, also yes.

What This Does Not Prove

Worth saying directly, because sloppy claims here get investigators embarrassed. Shadow analysis produces an estimate with a confidence range. It can rule locations out with real force: if the solar geometry at a claimed location and date doesn't match the shadows, the photo was not taken there, or it was altered. Ruling out is strong. Ruling in is softer. Two photos with matching shadows were plausibly taken at the same place and time. Plausibly. Not provably.

Treat every geolocation conclusion as a working estimate until an independent indicator corroborates it. The pole standard. The ridge profile. A license plate format in the reflection. One estimate is a lead. Two converging estimates are close to a fact.

FAQ

Does removing EXIF data make a photo anonymous?

No. It removes the embedded metadata only. The image still records sun position, shadow geometry, infrastructure design, terrain, vegetation, and reflections, each of which carries location information that no metadata scrubber touches.

How accurate is shadow-based geolocation?

It depends on the season, the angle of the shadows, and whether the image has been mirrored. Tight solar geometry in winter can constrain time of day to under an hour and longitude to a narrow band. Multiple shadow measurements from the same frame, or one shadow plus one infrastructure tell, narrow it further. It is an estimation technique, not a GPS readout.

Can this be done on any photo?

No. You need shadows or skylines that are actually measurable, fixed reference objects, and an unedited image. Heavy compression, filters, and editing destroy the fine detail. Night photos with artificial light do not work for solar analysis at all.

What's the fastest way to start?

Check the frame for text first, to rule out a mirrored image. Then pull the solar geometry with a tool like SunCalc using the best candidate location you can estimate. In parallel, identify one physical tell, a pole standard, a ridge profile, a license plate format. Run both threads before you commit to a conclusion.

Work the image, log the findings, write it up defensibly.

Open the Image OSINT Guide