Marketplace Image Privacy Audit · June 2026

Carousell Image Privacy Report — Grade D

14% GPS leak — second-highest in the expanded index. Peer-to-peer mobile-first upload flow means most listing images are shot and uploaded directly from smartphones with location services enabled. EXIF broadly retained. JPEG-dominant delivery.

Last updated: 2026-06-04 · n=18 images sampled

14% GPS Leak Rate
D

46% EXIF Retention Rate
D

35% WebP / AVIF Adoption
D

18 Images Sampled

Work at Carousell? Request a confidential re-audit.

We'll re-run the test, share the full methodology + per-image findings, and walk you through what would move this grade up — under NDA if you want.

Sample finding

⚠ Anonymized — no PII, coordinates redacted

Sample finding not available for this platform.

How Carousell compares

Platforms ranked above and below Carousell in the index, by overall grade.

Platform	Grade	GPS Leak	EXIF Retention	WebP/AVIF
Poshmark	D	12%	48%	38%
Carousell YOU ARE HERE	D	14%	46%	35%
Grailed	D	15%	44%	31%

View all 10 platforms →

What it would take to fix

One API call closes the gap. Filtrate's /v1/process strips all EXIF metadata, removes GPS coordinates, converts to WebP, and returns a compliance verdict. At Carousell's scale the fix is a single middleware insertion in the upload pipeline — images go through /v1/process before they reach the CDN. GPS leak drops to zero, EXIF retention drops to zero, and modern format adoption goes to 100%.

Read the integration guide →

Check your own listings

Run a live audit on any public listing or grade your platform's image pipeline against the same rubric we used here.

📊 Grade your site → 🔍 Scan a listing image 📷 What does your photo leak?

Embed this grade

Copy-paste into your README, docs, or blog post. The badge is a live SVG — it updates if the grade changes. Each one links back here so readers can see the full report.

Carousell · Grade D · Privacy Index by Filtrate

Preview ↗ JSON ↗

<a href="https://filtrate.polsia.app/index/carousell" rel="noopener"><img src="https://filtrate.polsia.app/index/carousell/badge.svg" alt="Carousell Privacy Index: D"></a>

[![Carousell Privacy Index: Grade D](https://filtrate.polsia.app/index/carousell/badge.svg)](https://filtrate.polsia.app/index/carousell)

// Drop this anywhere in your React app
export function PrivacyIndexBadge() {
  return (
    <a href="https://filtrate.polsia.app/index/carousell" rel="noopener noreferrer" target="_blank">
      <img
        src="https://filtrate.polsia.app/index/carousell/badge.svg"
        alt="Carousell Privacy Index: Grade D"
        height={28}
      />
    </a>
  );
}

Dark theme by default. Append ?theme=light or ?size=sm / ?size=lg to the badge URL.

Fix this for your platform

One API call. EXIF stripped, GPS removed, WebP compressed, compliance checked. Fraction of a cent per image.

Get a free API key → Read the docs