Input
- Up to 12 JPEG, PNG, WebP, or PDF files and 96 MiB per mixed batch
- Images up to 12 MiB each and PDFs up to 30 MiB each
- Files the browser can parse locally without a password
Privacy sanitizer
A cleaned copy with supported metadata checked again.
Review location, device, time, author, and software metadata before sharing a file.
01
1. Add files
Choose or drop files after the local workspace opens.
02
2. Set the result
Choose the output format and limits after opening the workspace.
Processing plan
- Scan locally
- Choose fields
- Clean and re-check
Save your settings on this device for reuse. Presets do not include files or their contents.
File controls load after an explicit action. Processing and downloads stay in this browser tab.
Worked example · Remove supported metadata and inspect what remains
Worked example
Remove supported metadata and inspect what remains
A designer is handing a draft image or PDF to an external collaborator. Begin with a synthetic file containing known metadata so that an empty finding can be distinguished from a parser limitation. Cleanup is only one part of reviewing what the recipient will receive.
- Input and settings
- Test image or PDF with known metadata
- Expected output
- Verification status · reviewed downloadable copy
Steps to reproduce
Inspect the supported findings, run cleanup and read the post-processing verification status. Open the downloaded copy separately and check the visible document. Share only the reviewed output; keep the original in a separate local location if you still need it.
Check before you use it
Could not verify must not be described as fully clean. Unsupported metadata and visible text, faces, addresses or screenshot content can still disclose information. This workflow is not redaction or a compliance certification. If verification fails, use an appropriate specialist tool or do not share the file until the remaining uncertainty is resolved.
What the privacy workspace inspects and cleans
Output
- A new copy with only the metadata scopes you selected removed
- A local risk review for location, device, author, timestamps, text, comments, and supported custom fields
- A re-read verification receipt labeled Verified clean or Verified with limits
Local processing boundary
Source files, metadata values, selected fields, cleaned bytes, and run history remain in this browser tab. Toolars analytics and storage do not receive them.
Visible test method
The release matrix scans a generated JPEG containing GPS, camera, serial, and time fields plus a PDF with document information, cleans selected scopes, then reopens both outputs before enabling download.
- Detect the true file type from bytes and classify supported findings by risk.
- Remove only the selected namespaces while preserving image pixel data whenever orientation does not require re-encoding.
- Reopen the output, check requested fields again, and report unsupported namespaces as unchecked rather than safe.
Important limitations
- Clears PDF Info. Optionally removes the document XMP container without parsing XML fields. Attachments, page/object metadata, comments, visible content and revision history remain unchecked. Saving changes the document and may invalidate signatures.
- Removing EXIF orientation from a rotated JPEG requires re-encoding; the workspace discloses when that safety step broadens cleanup.
- Removing an ICC profile may change color appearance, so it is excluded from the recommended image selection.
- A clean result covers selected supported namespaces only; it is not a forensic guarantee that no hidden data exists.
Common failures and recovery
The file type is unsupported or damaged
Remove it and retry with an unlocked JPEG, PNG, WebP, or PDF from the original source.
The result is Verified with limits
Review the unchecked namespaces and use a specialist document tool when complete forensic removal is required.
The browser runs out of memory
Reduce the batch size, close unused tabs, and run the files in smaller groups.
Privacy cleaning FAQ
Are files or metadata uploaded to Toolars?
No. Scanning, cleaning, verification, ZIP creation, and download run in the active browser tab.
Does Verified clean mean the whole file is guaranteed metadata-free?
No. It means every selected, supported namespace was absent when Toolars reopened the output.
Why is ICC not selected by default?
ICC is a color profile rather than typical personal metadata; removing it can alter how colors display.