C
C
B
Work at Depop? Request a confidential re-audit.
We'll re-run the test, share the full methodology + per-image findings, and walk you through what would move this grade up — under NDA if you want.
Sample finding
Several sampled listings retained camera model and timestamp metadata. One listing retained partial GPS IFD tags with coordinates truncated to city-level precision. Server-side processing appears inconsistent across upload paths.
How Depop compares
Platforms ranked above and below Depop in the index, by overall grade.
| Platform | Grade | GPS Leak | EXIF Retention | WebP/AVIF |
|---|---|---|---|---|
| Etsy | C | 6% | 22% | 68% |
| Depop YOU ARE HERE | C | 7% | 28% | 55% |
| Vestiaire Collective | C | 8% | 26% | 61% |
What it would take to fix
Depop is partway there but still exposing users on certain upload paths. Filtrate's /v1/process fills the gap: it strips all EXIF metadata, removes GPS coordinates, and recompresses to WebP on every image, every time — no path variance. The integration is a single POST call in the upload pipeline. Closing a C to an A requires about one afternoon of engineering work.
Read the integration guide →Check your own listings
Run a live audit on any public listing or grade your platform's image pipeline against the same rubric we used here.
Embed this grade
Copy-paste into your README, docs, or blog post. The badge is a live SVG — it updates if the grade changes. Each one links back here so readers can see the full report.
<a href="https://filtrate.polsia.app/index/depop" rel="noopener"><img src="https://filtrate.polsia.app/index/depop/badge.svg" alt="Depop Privacy Index: C"></a>
Dark theme by default. Append ?theme=light or ?size=sm / ?size=lg to the badge URL.
Fix this for your platform
One API call. EXIF stripped, GPS removed, WebP compressed, compliance checked. Fraction of a cent per image.