If this sounds like your week
Every share is a leak until you prove the EXIF is clean.
Searchers type “school yearbook committee photo folder metadata policy” after a close call or a policy reminder. The risk is not theoretical: GPS, owner fields, and software strings embed in files people already sent. Parent volunteers contribute camera rolls from gym nights and playgrounds—locations minors should not leak publicly.
Where tooling usually breaks
Cloud “scrubbers” add a new trust boundary.
Uploading sensitive work to a random site to remove sensitive data is a category error. The fix should be on-device, deterministic, and boring.