If this sounds like your week
Every share is a leak until you prove the EXIF is clean.
Searchers type “Darktable export JPEG strip GPS privacy batch” after a close call or a policy reminder. The risk is not theoretical: GPS, owner fields, and software strings embed in files people already sent. Open-source pipelines excel at color, not corporate metadata policy; exported JPEGs inherit whatever RAW carried.
Where tooling usually breaks
Cloud “scrubbers” add a new trust boundary.
Uploading sensitive work to a random site to remove sensitive data is a category error. The fix should be on-device, deterministic, and boring.