Image files often carry embedded metadata that names the original photographer, the distributing agency, and the applicable license terms. This metadata is one of the fastest signals for determining whether an image on your website was sourced from a licensed channel or added without authorization. EXIF, IPTC, and XMP are the three main metadata formats embedded in image files, and each can contain copyright ownership information that persists through downloads, edits, and republication.

What EXIF data is and what it contains

EXIF stands for Exchangeable Image File Format. It is a standard for embedding technical and descriptive data in image files, most commonly JPEG and TIFF. EXIF was designed to store camera settings: shutter speed, aperture, ISO, focal length, GPS coordinates, and capture date. These fields are written automatically by the camera at the moment of capture.

Artist: The name of the person who created the image
Copyright: A copyright notice string, often in the format "Copyright 2024 Jane Photographer" or "Getty Images"
ImageDescription: A free-text description field that photographers and agencies sometimes use for rights information

EXIF copyright fields are useful when populated, but they are not always present and are not always accurate. Anyone can edit EXIF data with free tools, including stripping or replacing fields. The absence of EXIF data does not mean an image is in the public domain.

IPTC metadata: the dedicated rights standard

IPTC (International Press Telecommunications Council) metadata is a richer standard developed specifically to communicate ownership and licensing information. News agencies, commercial photographers, and stock libraries use IPTC fields to establish provenance and define permitted use when distributing images to clients and publications.

Key IPTC copyright fields:

Creator (By-line): The photographer's name
Credit Line: The agency or publication to credit
Copyright Notice: A human-readable copyright statement such as "Copyright 2024 Smith Photography. All rights reserved."
Rights Usage Terms: Instructions for permitted use (for example, "Editorial use only" or "License required for commercial use")
Source: The original supplier of the image, often a stock agency name
License URL: A URL pointing to the applicable license terms

When a Getty Images or Shutterstock photo is exported from the agency's platform, it typically carries IPTC data identifying the agency, the photographer, and a copyright notice. If you find a Getty Images or Shutterstock credit in the IPTC data of an image currently on your website, that is a strong indicator that the image required an agency license to use. The presence of that metadata does not prove infringement by itself, but it shifts the burden to you to demonstrate that you hold a valid license.

XMP metadata: the modern standard for editing workflows

XMP (Extensible Metadata Platform) was developed by Adobe and is embedded in image files as a block of XML. Most modern editing software, including Adobe Photoshop, Lightroom, and Bridge, writes XMP metadata in addition to or instead of IPTC. XMP uses standardized schemas from Dublin Core and the IPTC extension to store rights information.

XMP fields that correspond to rights information:

dc:creator: Creator name
dc:rights: Copyright statement
xmpRights:UsageTerms: Human-readable license terms
xmpRights:WebStatement: A URL pointing to the license or rights declaration
photoshop:Credit: Credit line

Images that passed through Adobe products often carry XMP rights fields even if the original IPTC data was not populated by the stock agency. If a freelance photographer edited a licensed stock photo in Lightroom before passing it to a client, the XMP may reveal the image's origin through the agency's copyright string, even if the photographer did not realize the metadata was present.

Why metadata alone is not sufficient for copyright detection

Metadata can be stripped or altered. When images are uploaded to social media platforms, Facebook, Instagram, X (formerly Twitter), and Pinterest all remove EXIF and IPTC metadata from images at the time of upload. An image downloaded from Instagram will contain no embedded metadata, but that absence tells you nothing about its copyright status: the copyright exists independently of whether the metadata is present.

Conversely, metadata can be fabricated. An image with "CC0 No Rights Reserved" in its IPTC Copyright field could still be a licensed Getty photo with false metadata added to obscure its origin. Metadata is evidence, not proof.

This is why professional copyright enforcement systems do not rely solely on metadata. Getty Images operates PicScout, a system that uses perceptual hashing to detect licensed images across the web. A perceptual hash is a compact digital fingerprint of an image's visual content, designed so that similar images produce similar hashes even after resizing, cropping, recompression, or moderate color adjustment. Stripping metadata from a stock photo does not change its perceptual hash and does not protect you from detection.

How to read image metadata yourself

Windows (no additional tools required): Right-click the image file, select Properties, then go to the Details tab. You will see basic EXIF fields including copyright, camera make and model, capture date, GPS data, and a copyright notice if one was embedded.

ExifTool (free, cross-platform): ExifTool is a command-line application that reads all EXIF, IPTC, and XMP fields from any image and outputs them in a structured list. Running exiftool filename.jpg shows every embedded field including rights, credit, and source. ExifTool is particularly useful for batch-checking a folder of images.

Browser inspection: If you right-click an image on a webpage and select "Open image in new tab," the resulting URL sometimes contains agency codes or image IDs embedded in the filename or path (for example, a Getty image ID in the URL). This is not metadata inspection per se, but file naming conventions in stock agency download files often identify the source.

Online metadata viewers: Several free web tools accept an image upload and display its embedded metadata. These are convenient for occasional checks without installing software.

Metadata signals that PixGuard reads

PixGuard's copyright risk scanner reads embedded metadata from images on your website as one of several risk signals in its analysis. When an image carries IPTC data identifying a stock agency, a copyright notice naming a photographer or rights organization, or license terms indicating restricted commercial use, PixGuard flags that image for review alongside its other findings.

Metadata signals are weighted alongside additional indicators: visible watermarks embedded in the image itself, steganographic (invisible) watermarks, reverse image search matches, and AI-generation markers. The combination produces a risk score that helps you prioritize which images need immediate attention. PixGuard's watermark detection tool is specifically designed to surface both visible and embedded watermarks that photographers and agencies use to track image distribution.

Metadata and AI-generated images

AI image generation tools (Midjourney, DALL-E, Stable Diffusion, Adobe Firefly) do not embed consistent or reliable copyright metadata in their output files. Images generated by these tools typically have minimal metadata or none at all. The absence of metadata in an AI-generated image is expected and does not confirm or deny any copyright status.

AI-generated images are generally not indexed in any stock agency perceptual-hash database (because they do not originate from an agency's catalog), so they do not trigger standard agency enforcement detection. However, the terms of the specific AI tool you used still govern whether you can use the image commercially, and those terms vary significantly across platforms.

For understanding whether an image on your site was generated by an AI tool (including AI images passed off as real photography), PixGuard's AI image detector analyzes visual patterns associated with AI generation processes.

What to do when metadata reveals a stock agency origin

If you find stock agency metadata in an image on your site and you do not have a documented license from that agency:

Remove the image from your site immediately to stop ongoing use.
Search your email for a purchase confirmation or subscription invoice from the agency that would cover that image.
If you cannot find a license, replace the image with a properly licensed alternative.
If the image was provided by a contractor or supplier, contact them in writing and ask them to provide documentation of the license they held for that image.
Keep records of when you removed the image, in case a demand letter arrives later.

For more guidance on tracing image ownership when the original source is unclear, see how to find who owns an image.

Frequently Asked Questions

Can I remove EXIF data to avoid copyright claims? Removing EXIF or IPTC data does not remove the copyright from the image. It also does not protect you from detection systems like Getty's PicScout, which identify images by visual fingerprint rather than metadata. Removing metadata from an image you did not license is not a legal defense and may be treated as deliberate concealment in a dispute.

Does every image have EXIF or IPTC metadata? No. Screenshots, images created in design tools, images processed through social media platforms, and many AI-generated images have no embedded metadata. The absence of metadata does not mean the image is public domain or free to use.

Can I trust a "Creative Commons" claim embedded in image metadata? Not without verification. Metadata can be added or modified by anyone. To confirm a CC license claim, trace the image back to its original source (Wikimedia Commons, the photographer's Flickr page, etc.) and verify the license at the source. If you cannot verify the source, treat the metadata as unconfirmed and find an image you can verify.

What if a photographer removed their copyright metadata before sending me an image? The copyright exists regardless of whether the metadata is present. A photographer who sends you an image with all metadata stripped still owns the copyright in that image. The absence of metadata does not transfer rights to you. You need a written license or work-for-hire agreement to establish your rights to use the image.

What is a perceptual hash and why does it matter for copyright enforcement? A perceptual hash is a mathematical fingerprint of an image's visual content, designed to remain stable across common modifications like resizing, cropping, compression, and moderate color changes. Stock agencies use perceptual hashing to scan the web for unauthorized uses of their images without relying on metadata. Even an image with all metadata stripped and significant visual alterations may still match its original perceptual hash in the agency's database.

Run a free scan at PixGuard to surface images on your website that carry copyright-indicating metadata, visible watermarks, and other risk signals before an enforcement notice arrives.

What image EXIF metadata reveals about copyright ownership