What PDF metadata reveals about you

Every PDF carries an invisible index card alongside its pages: who made it, with which software, when, and under what internal title. That card travels with the file, and anyone who receives the document can read it in seconds. The Author field is usually your operating system account name. The Producer field names the exact software build. The timestamps say when the file was created and last touched. You can view and clear a PDF's metadata right in your browser, without the file leaving your machine, and find out in a minute what yours has been telling people.

The fields a PDF actually stores

The format defines a small structure called the Info dictionary. These are the entries worth knowing:

• Title — the document's internal title. It rarely matches the filename, because it's inherited from the template or source document. That's how a file named proposal.pdf ends up carrying the internal title Copy of Contract_v3_FINAL2.
• Author — filled in automatically from your OS account name, or from the name your office suite was registered under years ago.
• Subject and Keywords — typed by hand, so usually empty, except when somebody used them for internal notes and forgot.
• Creator — the application the content came from: Word, InDesign, LaTeX, an internal reporting system.
• Producer — the library or engine that wrote the final PDF, normally with a version number attached.
• CreationDate and ModDate — creation and last-modified timestamps, with time of day and time zone.

None of these fields are required, and none of them are verified by anything. They are free text written by whichever program produced the file — informative, never evidentiary.

What those fields give away

Individually they look harmless. Together they sketch a fairly sharp profile:

• A résumé. The Author field carrying the account name from your current employer's laptop, and the internal title revealing that this CV is a copy of the one you sent to a different company last month.
• A client proposal. Two prospects receive the same PDF and the internal title still names the first one. The creation date also shows the "bespoke" proposal was generated weeks before the discovery call.
• A leaked or published document. The Producer identifies the software and its version — useful to anyone profiling the systems behind it — and the Author points at one named person inside an organization.
• Anything with a deadline attached. ModDate can contradict "I just finished it" with uncomfortable precision. It can also back you up, which is the other half of the same coin.

It's the same mechanism that makes a photo announce where it was taken — we covered that in what your photos reveal about you. The difference: image EXIF often includes GPS coordinates, which PDFs don't carry, but a PDF points far more directly at a specific person and employer.

There's a second store: XMP

Worth knowing before you call a file clean. Many PDFs also carry an XMP packet: an XML block embedded inside the document. It duplicates much of the Info dictionary — title, author, dates — and adds whatever the writing tool wanted to record: unique document identifiers, edit history, color profiles, design-suite fields.

The practical consequence is that emptying the Info dictionary doesn't guarantee the XMP packet is empty too. If the PDF came out of InDesign, Illustrator or a real publishing workflow, re-inspect the output after cleaning it. For files produced by Word, Google Docs, a browser's print-to-PDF or a scanner, clearing Info covers the substance.

How to inspect it, and how to wipe it

Inspecting is easy: nearly every PDF reader has a Document Properties dialog, though it usually shows a curated subset and won't let you edit anything. To see the whole dictionary and change it, open the PDF metadata viewer and drop the file in. From there you have two genuinely different jobs:

• Fix it. Set a sensible internal title and a consistent author. This is what you want on documents that represent your brand — a correct internal title shows up in browser tabs and in internal search results.
• Empty it. Clear every field before the file goes outside. This is what you want on a résumé, a proposal, a filing or anything that shouldn't point back at your machine.

Everything happens in the browser: the PDF is never uploaded, which is the minimum bar for a document containing personal data. If you're about to share it externally, two other local steps pair naturally — compress the PDF so it fits through email, and if it's confidential, add an open password.

What stripping metadata does not fix

Don't mistake hygiene for anonymity. Clearing the Info dictionary leaves all of this untouched:

• Visible content. A letterhead, a scanned signature, a footer naming the department — all still there.
• Covered-up text. A black rectangle drawn over a paragraph is a drawing. The text underneath survives and can be selected and copied. Real redaction means deleting the text, not hiding it.
• Embedded images. If the PDF contains photos, their own EXIF data can survive inside the document. Check images with the EXIF metadata viewer before you place them.
• Comments and annotations. Review notes, highlights and filled form fields are PDF objects, not metadata, and have to be removed separately.

One more detail that catches people out: if you run the cleaned PDF through another tool afterwards — one that signs it, compresses it or re-prints it — that tool writes its own Producer string and a fresh ModDate. Cleaning is the last step before sending, not the first.

The thirty-second habit

Before any PDF leaves your organization, open it in a metadata viewer and read two fields: Author and Title. Those are the two that most often say something you didn't mean to say, and the two that take the least time to fix. Sensitive document? Wipe everything. Brand-facing document? Fill it in properly. The one option that never makes sense is sending it unchecked — which is what almost everybody does.

Frequently asked questions

Related tools

• PDF metadata viewer — Read, edit and clear author, title, dates and software fields.
• Photo EXIF viewer — The image equivalent, GPS coordinates included.
• Password-protect a PDF — Real open-password encryption for sensitive files.
• Compress PDF — Shrink the file before you send it.

You might also like: what your photos reveal about you and how to remove a password from a PDF you own.