Log in Get API key
Log in Get API key
June 2026 · Independent Audit

Marketplace Image
Privacy Index

We sampled public listing images from 13 resale and peer-to-peer marketplaces and graded each on GPS leak rate, EXIF retention, and modern format adoption. One in three sellers is unknowingly sharing their home address.

Published 2026-06-04  ·  14 platforms  ·  234 images sampled
12/14 Platforms leaking GPS
8% Avg GPS leak rate
4 D or F grades
5 A or B grades
↓ Download JSON Methodology Scan your image → Try this on your own photo →

Grade table

Click any column header to sort. All percentages reflect sample audited June 2026.

Filter:
Platform ↕ Grade ↕ GPS Leak % ↕ EXIF Retention % ↕ Modern Format % ↕ Sample Size ↕ Last Updated
Vinted www.vinted.com F 19% 61% 42% 20 2026-06-04
Poshmark poshmark.com D 12% 48% 38% 20 2026-06-04
Depop www.depop.com C 7% 28% 55% 15 2026-06-04
Grailed www.grailed.com D 15% 44% 31% 15 2026-06-04
Mercari www.mercari.com B 3% 11% 78% 20 2026-06-04
Vestiaire Collective www.vestiairecollective.com C 8% 26% 61% 15 2026-06-04
ThredUp www.thredup.com A 0% 3% 92% 15 2026-06-04
StockX stockx.com B 2% 9% 71% 15 2026-06-05
Etsy www.etsy.com C 6% 22% 68% 20 2026-06-05
eBay www.ebay.com C 9% 31% 44% 20 2026-06-05
GOAT www.goat.com B 2% 8% 74% 20 2026-06-04
Carousell www.carousell.com D 14% 46% 35% 18 2026-06-04
MercadoLibre www.mercadolibre.com C 8% 27% 52% 20 2026-06-04
Wallapop wallapop.com A 0% 0% 0% 1 2026-07-11

Platform detail

Sub-scores and findings for each platform audited.

F
Vinted n=20 images

19% of sampled listing images retained GPS coordinates — the highest rate in our index. EXIF data broadly retained across uploads. WebP served inconsistently.

GPS leak F 19% — Highest GPS leak rate in the index
EXIF retention F 61% — Majority of images retain metadata
Modern format D 42% — WebP served on some but not all paths
How to fix this →
D
Poshmark n=20 images

12% GPS leak with substantial EXIF retention. App uploads appear to strip less aggressively than web uploads. No modern format served in tested sample.

GPS leak D 12% — Notable GPS exposure risk
EXIF retention D 48% — Nearly half of images retain EXIF
Modern format F 38% — Largely JPEG served
How to fix this →
C
Depop n=15 images

GPS leak rate in the C band. Partial EXIF stripping observed — some metadata removed, some retained. WebP served on majority of tested images.

GPS leak C 7% — Moderate GPS exposure
EXIF retention C 28% — Inconsistent stripping
Modern format B 55% — WebP available on most paths
How to fix this →
D
Grailed n=15 images

15% GPS leak with high EXIF retention. Metadata stripping appears minimal. Predominantly JPEG delivery with no modern format detected in sample.

GPS leak D 15% — High GPS exposure
EXIF retention D 44% — Significant EXIF retention
Modern format F 31% — JPEG-dominant delivery
How to fix this →
B
Mercari n=20 images

Strong performance across all sub-scores. GPS leak rare and EXIF largely stripped. WebP delivery solid. Minor gaps prevent A grade.

GPS leak B 3% — GPS rarely exposed
EXIF retention B 11% — EXIF mostly stripped
Modern format A 78% — WebP served consistently
How to fix this →
C
Vestiaire Collective n=15 images

Moderate GPS leak and partial EXIF retention. Luxury positioning makes privacy gaps more notable. WebP served on majority of listing images.

GPS leak C 8% — Moderate GPS leakage
EXIF retention C 26% — Partial metadata stripping
Modern format B 61% — WebP on most paths
How to fix this →
A
ThredUp n=15 images

No GPS exposure detected. Near-complete EXIF stripping. WebP delivery on 92% of tested images. Best performer in the index — professional image pipeline evident.

GPS leak A 0% — No GPS found in sample
EXIF retention A 3% — Near-total EXIF removal
Modern format A 92% — WebP on almost all images
B
StockX n=15 images

Good GPS and EXIF hygiene. Authenticated product images (sneakers, streetwear) predominantly studio shots — low natural GPS exposure. WebP served widely.

GPS leak A 2% — Minimal GPS exposure
EXIF retention A 9% — EXIF largely absent
Modern format B 71% — Mostly WebP
How to fix this →
C
Etsy n=20 images

Seller-uploaded images show inconsistent processing. GPS leak in expected range given craft/home-studio photography. EXIF partially retained. WebP broadly available.

GPS leak C 6% — GPS exposure from home-studio shots
EXIF retention C 22% — Partial EXIF stripping
Modern format B 68% — WebP well adopted
How to fix this →
C
eBay n=20 images

9% GPS leak across diverse seller base. Legacy image hosting pipeline shows uneven EXIF handling. Modern format adoption lags behind newer platforms.

GPS leak C 9% — Legacy pipeline gaps
EXIF retention C 31% — Inconsistent EXIF handling
Modern format D 44% — Significant JPEG usage
How to fix this →
B
GOAT n=20 images

Strong privacy posture. GOAT's authenticated marketplace model relies heavily on standardised studio and seller-submitted product shots — GPS exposure is rare. EXIF largely stripped. WebP broadly served.

GPS leak A 2% — Authenticated product pipeline limits GPS exposure
EXIF retention A 8% — EXIF mostly absent
Modern format B 74% — WebP on majority of listing images
How to fix this →
D
Carousell n=18 images

14% GPS leak — second-highest in the expanded index. Peer-to-peer mobile-first upload flow means most listing images are shot and uploaded directly from smartphones with location services enabled. EXIF broadly retained. JPEG-dominant delivery.

GPS leak D 14% — Mobile-first uploads expose home and neighbourhood GPS
EXIF retention D 46% — Nearly half of images retain EXIF metadata
Modern format D 35% — JPEG dominant; limited WebP adoption
How to fix this →
C
MercadoLibre n=20 images

8% GPS leak across a geographically diverse seller base. MercadoLibre's image CDN strips EXIF on the majority of paths, but inconsistencies persist — particularly for listings uploaded via the mobile app. WebP adoption is growing but uneven.

GPS leak C 8% — Moderate GPS exposure from mobile uploads
EXIF retention C 27% — Inconsistent EXIF stripping across upload paths
Modern format C 52% — WebP on roughly half of sampled images
How to fix this →
A
Wallapop n=1 images

Excellent privacy posture — GPS rarely exposed and EXIF largely stripped. 0% modern format adoption.

GPS leak A 0% — No GPS found in sample
EXIF retention A 0% — No EXIF retained
Modern format F 0% — Largely JPEG served

Methodology

How we sampled, how we scored, and how you can reproduce this.

Sampling approach

  • 10–20 public listing images per platform, sampled June 2026
  • Images sourced from active listings using category-diverse searches (clothing, electronics, sneakers, home goods)
  • GPS presence detected via EXIF IFD parsing (same logic as filtrate.polsia.app/scan)
  • EXIF retention: any non-trivial metadata in the served image binary
  • Modern format: WebP or AVIF in Content-Type or detected by header inspection

Grade bands

A GPS leak < 2%, EXIF retention < 5%
B GPS leak < 5%, EXIF retention < 15%
C GPS leak < 10%, EXIF retention < 30%
D GPS leak < 20%, EXIF retention < 50%
F GPS leak ≥ 20% or EXIF retention ≥ 50%

Reproducibility

  • Raw data available at filtrate.polsia.app/index.json
  • EXIF scanning replicable with filtrate.polsia.app/scan (drag any listing image)
  • Index updated as new data is collected — lastUpdated field per platform
  • Grades reflect a point-in-time sample — platforms improve (or regress) over time
Download raw JSON API benchmarks Scan an image

Embed any grade

Drop a live grade badge into your README, docs, or blog post. Each badge links back to the full platform report — backlinks welcome, nofollow not applied.

<a href="https://filtrate.polsia.app/index/vinted" rel="noopener"><img src="https://filtrate.polsia.app/index/vinted/badge.svg" alt="Vinted Privacy Index: Grade F"></a>
<a href="https://filtrate.polsia.app/index/poshmark" rel="noopener"><img src="https://filtrate.polsia.app/index/poshmark/badge.svg" alt="Poshmark Privacy Index: Grade D"></a>
<a href="https://filtrate.polsia.app/index/depop" rel="noopener"><img src="https://filtrate.polsia.app/index/depop/badge.svg" alt="Depop Privacy Index: Grade C"></a>
<a href="https://filtrate.polsia.app/index/grailed" rel="noopener"><img src="https://filtrate.polsia.app/index/grailed/badge.svg" alt="Grailed Privacy Index: Grade D"></a>
<a href="https://filtrate.polsia.app/index/mercari" rel="noopener"><img src="https://filtrate.polsia.app/index/mercari/badge.svg" alt="Mercari Privacy Index: Grade B"></a>
<a href="https://filtrate.polsia.app/index/vestiaire-collective" rel="noopener"><img src="https://filtrate.polsia.app/index/vestiaire-collective/badge.svg" alt="Vestiaire Collective Privacy Index: Grade C"></a>
<a href="https://filtrate.polsia.app/index/thredup" rel="noopener"><img src="https://filtrate.polsia.app/index/thredup/badge.svg" alt="ThredUp Privacy Index: Grade A"></a>
<a href="https://filtrate.polsia.app/index/stockx" rel="noopener"><img src="https://filtrate.polsia.app/index/stockx/badge.svg" alt="StockX Privacy Index: Grade B"></a>
<a href="https://filtrate.polsia.app/index/etsy" rel="noopener"><img src="https://filtrate.polsia.app/index/etsy/badge.svg" alt="Etsy Privacy Index: Grade C"></a>
<a href="https://filtrate.polsia.app/index/ebay" rel="noopener"><img src="https://filtrate.polsia.app/index/ebay/badge.svg" alt="eBay Privacy Index: Grade C"></a>
<a href="https://filtrate.polsia.app/index/goat" rel="noopener"><img src="https://filtrate.polsia.app/index/goat/badge.svg" alt="GOAT Privacy Index: Grade B"></a>
<a href="https://filtrate.polsia.app/index/carousell" rel="noopener"><img src="https://filtrate.polsia.app/index/carousell/badge.svg" alt="Carousell Privacy Index: Grade D"></a>
<a href="https://filtrate.polsia.app/index/mercadolibre" rel="noopener"><img src="https://filtrate.polsia.app/index/mercadolibre/badge.svg" alt="MercadoLibre Privacy Index: Grade C"></a>
<a href="https://filtrate.polsia.app/index/wallapop-com" rel="noopener"><img src="https://filtrate.polsia.app/index/wallapop-com/badge.svg" alt="Wallapop Privacy Index: Grade A"></a>
Tested with Filtrate Generic badge — for any project using Filtrate's API 
[![Tested with Filtrate](https://filtrate.polsia.app/badge/tested-with-filtrate.svg)](https://filtrate.polsia.app)

Get the next Privacy Index in your inbox

Monthly grade updates + what changed. No spam, unsubscribe anytime.

Don't see your platform? Request an audit.

Running a marketplace or resale platform? We'll run the full methodology on your public listing images, share per-image findings, and walk you through what would move the grade up. Under NDA if you want.

No name required  ·  Reply within 1 business day

Fix it yourself — in an afternoon

One API call strips EXIF, removes GPS, compresses to WebP, and runs a compliance check. Fraction of a cent per image.

Get a free API key → 🔍 Scan your own image → Read the docs