We strip photo metadata, but we do it on the server. Therefore the photo that ends up published doesn't have metadata. Doing this on the client would be better for privacy, we'll look into it.