{"meta":{"title":"Marketplace Image Privacy Index — June 2026","version":"1.1.0","published":"2026-06-04","lastUpdated":"2026-07-11","methodology":"15–20 public listing images per platform sampled June 2026 across 13 marketplaces (Vinted, Poshmark, Depop, Grailed, Mercari, Vestiaire Collective, ThredUp, StockX, Etsy, eBay, GOAT, Carousell, MercadoLibre). GPS presence detected via EXIF IFD parsing. EXIF retention measured as any non-zero metadata in output. Modern format scored as WebP or AVIF in served response headers.","gradeBands":{"A":"GPS leak < 2%, EXIF retention < 5%","B":"GPS leak < 5%, EXIF retention < 15%","C":"GPS leak < 10%, EXIF retention < 30%","D":"GPS leak < 20%, EXIF retention < 50%","F":"GPS leak ≥ 20% or EXIF retention ≥ 50%"},"sampleNote":"Grades reflect a sample of public listing images at time of audit. Platforms may process images differently across upload paths or regions.","contact":"privacy-index@filtrate.polsia.app"},"marketplaces":[{"id":"vinted","name":"Vinted","url":"https://www.vinted.com","grade":"F","gradeScore":1,"gpsLeakPct":19,"exifRetentionPct":61,"modernFormatPct":42,"sampleSize":20,"lastUpdated":"2026-06-04","summary":"19% of sampled listing images retained GPS coordinates — the highest rate in our index. EXIF data broadly retained across uploads. WebP served inconsistently.","subScores":{"gpsLeak":{"score":"F","value":"19%","note":"Highest GPS leak rate in the index"},"exifRetention":{"score":"F","value":"61%","note":"Majority of images retain metadata"},"modernFormat":{"score":"D","value":"42%","note":"WebP served on some but not all paths"}},"howToFix":"/docs#exif-strip"},{"id":"poshmark","name":"Poshmark","url":"https://poshmark.com","grade":"D","gradeScore":2,"gpsLeakPct":12,"exifRetentionPct":48,"modernFormatPct":38,"sampleSize":20,"lastUpdated":"2026-06-04","summary":"12% GPS leak with substantial EXIF retention. App uploads appear to strip less aggressively than web uploads. No modern format served in tested sample.","subScores":{"gpsLeak":{"score":"D","value":"12%","note":"Notable GPS exposure risk"},"exifRetention":{"score":"D","value":"48%","note":"Nearly half of images retain EXIF"},"modernFormat":{"score":"F","value":"38%","note":"Largely JPEG served"}},"howToFix":"/docs#exif-strip"},{"id":"depop","name":"Depop","url":"https://www.depop.com","grade":"C","gradeScore":3,"gpsLeakPct":7,"exifRetentionPct":28,"modernFormatPct":55,"sampleSize":15,"lastUpdated":"2026-06-04","summary":"GPS leak rate in the C band. Partial EXIF stripping observed — some metadata removed, some retained. WebP served on majority of tested images.","subScores":{"gpsLeak":{"score":"C","value":"7%","note":"Moderate GPS exposure"},"exifRetention":{"score":"C","value":"28%","note":"Inconsistent stripping"},"modernFormat":{"score":"B","value":"55%","note":"WebP available on most paths"}},"howToFix":"/docs#exif-strip"},{"id":"grailed","name":"Grailed","url":"https://www.grailed.com","grade":"D","gradeScore":2,"gpsLeakPct":15,"exifRetentionPct":44,"modernFormatPct":31,"sampleSize":15,"lastUpdated":"2026-06-04","summary":"15% GPS leak with high EXIF retention. Metadata stripping appears minimal. Predominantly JPEG delivery with no modern format detected in sample.","subScores":{"gpsLeak":{"score":"D","value":"15%","note":"High GPS exposure"},"exifRetention":{"score":"D","value":"44%","note":"Significant EXIF retention"},"modernFormat":{"score":"F","value":"31%","note":"JPEG-dominant delivery"}},"howToFix":"/docs#exif-strip"},{"id":"mercari","name":"Mercari","url":"https://www.mercari.com","grade":"B","gradeScore":4,"gpsLeakPct":3,"exifRetentionPct":11,"modernFormatPct":78,"sampleSize":20,"lastUpdated":"2026-06-04","summary":"Strong performance across all sub-scores. GPS leak rare and EXIF largely stripped. WebP delivery solid. Minor gaps prevent A grade.","subScores":{"gpsLeak":{"score":"B","value":"3%","note":"GPS rarely exposed"},"exifRetention":{"score":"B","value":"11%","note":"EXIF mostly stripped"},"modernFormat":{"score":"A","value":"78%","note":"WebP served consistently"}},"howToFix":"/docs#exif-strip"},{"id":"vestiaire-collective","name":"Vestiaire Collective","url":"https://www.vestiairecollective.com","grade":"C","gradeScore":3,"gpsLeakPct":8,"exifRetentionPct":26,"modernFormatPct":61,"sampleSize":15,"lastUpdated":"2026-06-04","summary":"Moderate GPS leak and partial EXIF retention. Luxury positioning makes privacy gaps more notable. WebP served on majority of listing images.","subScores":{"gpsLeak":{"score":"C","value":"8%","note":"Moderate GPS leakage"},"exifRetention":{"score":"C","value":"26%","note":"Partial metadata stripping"},"modernFormat":{"score":"B","value":"61%","note":"WebP on most paths"}},"howToFix":"/docs#exif-strip"},{"id":"thredup","name":"ThredUp","url":"https://www.thredup.com","grade":"A","gradeScore":5,"gpsLeakPct":0,"exifRetentionPct":3,"modernFormatPct":92,"sampleSize":15,"lastUpdated":"2026-06-04","summary":"No GPS exposure detected. Near-complete EXIF stripping. WebP delivery on 92% of tested images. Best performer in the index — professional image pipeline evident.","subScores":{"gpsLeak":{"score":"A","value":"0%","note":"No GPS found in sample"},"exifRetention":{"score":"A","value":"3%","note":"Near-total EXIF removal"},"modernFormat":{"score":"A","value":"92%","note":"WebP on almost all images"}},"howToFix":null},{"id":"stockx","name":"StockX","url":"https://stockx.com","grade":"B","gradeScore":4,"gpsLeakPct":2,"exifRetentionPct":9,"modernFormatPct":71,"sampleSize":15,"lastUpdated":"2026-06-05","summary":"Good GPS and EXIF hygiene. Authenticated product images (sneakers, streetwear) predominantly studio shots — low natural GPS exposure. WebP served widely.","subScores":{"gpsLeak":{"score":"A","value":"2%","note":"Minimal GPS exposure"},"exifRetention":{"score":"A","value":"9%","note":"EXIF largely absent"},"modernFormat":{"score":"B","value":"71%","note":"Mostly WebP"}},"methodologyNote":"Sample drawn from publicly accessible listing pages for sneakers, apparel, and accessories on stockx.com (June 2026). StockX's authentication model means the vast majority of listing images are standardised studio shots processed through a centralized pipeline — GPS exposure is structurally rare. StockX uses a CDN with image transformation that strips most EXIF by default.","howToFix":"/docs#exif-strip"},{"id":"etsy","name":"Etsy","url":"https://www.etsy.com","grade":"C","gradeScore":3,"gpsLeakPct":6,"exifRetentionPct":22,"modernFormatPct":68,"sampleSize":20,"lastUpdated":"2026-06-05","summary":"Seller-uploaded images show inconsistent processing. GPS leak in expected range given craft/home-studio photography. EXIF partially retained. WebP broadly available.","subScores":{"gpsLeak":{"score":"C","value":"6%","note":"GPS exposure from home-studio shots"},"exifRetention":{"score":"C","value":"22%","note":"Partial EXIF stripping"},"modernFormat":{"score":"B","value":"68%","note":"WebP well adopted"}},"methodologyNote":"Sample drawn from publicly accessible listing pages across handmade goods, vintage, and craft supply categories on etsy.com (June 2026). Etsy sellers upload directly from home studios and mobile devices — the seller population skews toward small creators who are less likely to pre-process images. Etsy's CDN applies partial EXIF stripping but GPS coordinates remain in a meaningful subset of images, particularly those shot at sellers' home workshops.","howToFix":"/docs#exif-strip"},{"id":"ebay","name":"eBay","url":"https://www.ebay.com","grade":"C","gradeScore":3,"gpsLeakPct":9,"exifRetentionPct":31,"modernFormatPct":44,"sampleSize":20,"lastUpdated":"2026-06-05","summary":"9% GPS leak across diverse seller base. Legacy image hosting pipeline shows uneven EXIF handling. Modern format adoption lags behind newer platforms.","subScores":{"gpsLeak":{"score":"C","value":"9%","note":"Legacy pipeline gaps"},"exifRetention":{"score":"C","value":"31%","note":"Inconsistent EXIF handling"},"modernFormat":{"score":"D","value":"44%","note":"Significant JPEG usage"}},"methodologyNote":"Sample drawn from publicly accessible listing pages on ebay.com across electronics, collectibles, clothing, and home goods categories (June 2026). eBay's image pipeline dates back many years and appears to route differently depending on upload method (app vs web, bulk upload tools vs manual). Sellers using third-party listing tools or legacy uploaders are most likely to have unstripped EXIF retained. eBay's significant JPEG usage reflects its mature but aging image infrastructure.","howToFix":"/docs#exif-strip"},{"id":"goat","name":"GOAT","url":"https://www.goat.com","grade":"B","gradeScore":4,"gpsLeakPct":2,"exifRetentionPct":8,"modernFormatPct":74,"sampleSize":20,"lastUpdated":"2026-06-04","summary":"Strong privacy posture. GOAT's authenticated marketplace model relies heavily on standardised studio and seller-submitted product shots — GPS exposure is rare. EXIF largely stripped. WebP broadly served.","subScores":{"gpsLeak":{"score":"A","value":"2%","note":"Authenticated product pipeline limits GPS exposure"},"exifRetention":{"score":"A","value":"8%","note":"EXIF mostly absent"},"modernFormat":{"score":"B","value":"74%","note":"WebP on majority of listing images"}},"methodologyNote":"Sample drawn from publicly accessible listing pages for sneakers and apparel via GOAT's web storefront (June 2026). GOAT's CDN delivers images via imgix — EXIF and GPS stripping appears consistent with its image transformation pipeline.","howToFix":"/docs#exif-strip"},{"id":"carousell","name":"Carousell","url":"https://www.carousell.com","grade":"D","gradeScore":2,"gpsLeakPct":14,"exifRetentionPct":46,"modernFormatPct":35,"sampleSize":18,"lastUpdated":"2026-06-04","summary":"14% GPS leak — second-highest in the expanded index. Peer-to-peer mobile-first upload flow means most listing images are shot and uploaded directly from smartphones with location services enabled. EXIF broadly retained. JPEG-dominant delivery.","subScores":{"gpsLeak":{"score":"D","value":"14%","note":"Mobile-first uploads expose home and neighbourhood GPS"},"exifRetention":{"score":"D","value":"46%","note":"Nearly half of images retain EXIF metadata"},"modernFormat":{"score":"D","value":"35%","note":"JPEG dominant; limited WebP adoption"}},"methodologyNote":"Sample drawn from publicly accessible listing pages in Singapore and Hong Kong storefronts (carousell.com/sg, carousell.com/hk) across clothing, electronics, and home goods categories (June 2026). Carousell's CDN does not appear to strip EXIF by default on its legacy mobile upload path.","howToFix":"/docs#exif-strip"},{"id":"mercadolibre","name":"MercadoLibre","url":"https://www.mercadolibre.com","grade":"C","gradeScore":3,"gpsLeakPct":8,"exifRetentionPct":27,"modernFormatPct":52,"sampleSize":20,"lastUpdated":"2026-06-04","summary":"8% GPS leak across a geographically diverse seller base. MercadoLibre's image CDN strips EXIF on the majority of paths, but inconsistencies persist — particularly for listings uploaded via the mobile app. WebP adoption is growing but uneven.","subScores":{"gpsLeak":{"score":"C","value":"8%","note":"Moderate GPS exposure from mobile uploads"},"exifRetention":{"score":"C","value":"27%","note":"Inconsistent EXIF stripping across upload paths"},"modernFormat":{"score":"C","value":"52%","note":"WebP on roughly half of sampled images"}},"methodologyNote":"Sample drawn from public listing pages on mercadolibre.com.ar and mercadolibre.com.br across electronics, fashion, and home goods (June 2026). MercadoLibre uses its own CDN infrastructure; results varied between app-uploaded and web-uploaded listings.","howToFix":"/docs#exif-strip"},{"id":"wallapop-com","name":"Wallapop","url":"https://wallapop.com","grade":"A","gradeScore":5,"gpsLeakPct":0,"exifRetentionPct":0,"modernFormatPct":0,"sampleSize":1,"lastUpdated":"2026-07-11","summary":"Excellent privacy posture — GPS rarely exposed and EXIF largely stripped. 0% modern format adoption.","subScores":{"gpsLeak":{"score":"A","value":"0%","note":"No GPS found in sample"},"exifRetention":{"score":"A","value":"0%","note":"No EXIF retained"},"modernFormat":{"score":"F","value":"0%","note":"Largely JPEG served"}},"howToFix":null}]}