What a PDF can reveal about you — and how to remove it before sharing

A PDF looks like a finished page, but the file around that page often carries more: who wrote it, on which software, when it was edited, and sometimes text you thought was long gone. Most of the time that is harmless. When the document is going to a client, a journalist, a court or the public, it is worth a two-minute check.

What a PDF can carry

• Document properties. Title, author, subject and keywords, plus the program the document was written in, the software that produced the PDF, and when it was created and last changed. The author is often a full name or a computer username.
• A second copy of those properties, stored as an XMP metadata stream, which some readers show instead of the first.
• Comments and annotations — review notes, highlights and sticky notes.
• Form field values, which are stored separately from the page.
• Text hidden under shapes, such as names “blacked out” with a rectangle that is still selectable underneath.
• Earlier versions. Many editors save changes by appending them to the end of the file, so a previous version can sometimes be recovered from the same PDF.

See what your file holds

Open the PDF in your reader and look at its document properties, usually under File, then Properties. Or add it to the PDF Metadata Editor, which fills in every property it finds so you can read them all at once. To see every word the pages contain, including text a viewer might not show, run the file through PDF to Text and read the result.

Clean the properties

1. Add the PDF to the PDF Metadata Editor.
2. Press Clear all, or edit the fields to what you are happy to share — a neutral title, your organisation as author.
3. Leave “Remove the XMP metadata stream” ticked, so no second copy survives.
4. Save. The new file is opened again and its properties read back, so you see what it really contains.

Only the properties are rewritten. The pages, fonts and images are carried over unchanged. Do this as the last step, because other tools often set the producer and dates again when they save.

Deal with what is on the pages

• Filled-in forms: flatten them with Flatten PDF Form so the answers become part of the page and the editable fields disappear.
• Names, numbers or passages that must go: use Redact PDF, which removes the text itself rather than covering it. A black box drawn in an editor hides nothing. See how to redact a PDF properly.
• Comments: delete or resolve them in the program you reviewed in, before exporting the final PDF.

Start from a clean export where you can

The tidiest PDF is one exported fresh from the source document after the comments, tracked changes and hidden text have been dealt with there. Word processors usually have an option to inspect a document for hidden information before saving — use it, then export. Cleaning a finished PDF is the fallback when you no longer have the source.

Do not forget the file name and the email

A file named “Smith-settlement-final-v7.pdf” says more than its properties ever could. Rename the file to something neutral, and check the body of the email you send it with: forwarded threads below your message often carry more than the attachment.

A short checklist

• Properties cleared or set deliberately, XMP stream removed.
• Comments removed and forms flattened.
• Sensitive text redacted, and the redacted copy searched to prove it is gone.
• Neutral file name, and nothing extra in the covering email.