Why this matters
InDesign PDFs often carry the designer's Adobe account name in the Author field — usually their real name.
The Creator field reads 'Adobe InDesign CC 2024 (Macintosh)' or similar — revealing your OS and exact InDesign version, which can identify your employer's design tooling.
InDesign's XMP metadata block includes custom fields for templates, fonts, and plug-ins that can fingerprint your workflow.
Agencies and freelancers sending client deliverables as InDesign-exported PDFs routinely leak this metadata to clients and competitors.
What the scanner detects
- Author field (designer's Adobe account name)
- Creator field (InDesign version + OS)
- Producer field (Adobe PDF Library version)
- Custom XMP metadata (templates, fonts, plug-ins)
- Creation/modification timestamps revealing your timezone
Ready to scan your PDF?
Drop your file into the scanner. Results in 5 seconds. Nothing leaves your browser.
Open the scannerHow it works
Click "Scan your PDF now" above. The scanner opens in your browser tab — no download, no install.
Drop in your PDF. The file is parsed entirely in your browser using JavaScript. No upload, no server, no logs.
Review your 0–100 risk score, the list of findings, and the AI-generated redaction recommendations. Then take action.
Frequently asked questions
How do I erase InDesign metadata from a PDF?
After exporting from InDesign, drop the PDF into PrivacyScanPDF. It reads the file locally, strips the Author/Creator/Producer fields and XMP metadata, and downloads the cleaned PDF. Your InDesign source file is unaffected.
Can I strip metadata during InDesign export?
Partially. InDesign's PDF export dialog has a 'Include All Document Metadata' checkbox — unchecking it strips some metadata. But the Author and Creator fields often persist. For complete stripping, run the exported PDF through a browser-based metadata remover.
What does InDesign PDF metadata reveal?
Typically: Author (your Adobe account name), Creator (InDesign version + OS), Producer (Adobe PDF Library version), XMP block (templates, fonts, plug-ins, custom fields), creation/modification timestamps. Combined, this can fingerprint your specific InDesign installation.
Is it safe to upload InDesign PDFs to online metadata removers?
Risky. Server-based removers upload your full PDF (including any client deliverable content) to their server. For agency work under NDA, this can be an unauthorized disclosure. Browser-based tools like PrivacyScanPDF process locally — your PDF never leaves your device.
Related privacy scans
How to Remove Metadata From a PDF on Mac (Without Acrobat)
Mac users don't need Adobe Acrobat to strip PDF metadata. This tool runs in Safari, Chrome, or Firefox on macOS 12 Monterey and later — no install, no signup, no Acrobat subscription. Drop your PDF, the metadata is removed locally, download the cleaned file. Your PDF never leaves your Mac.
How to Clear Title and Author Properties From a PDF on Windows 11
On Windows 11, you don't need Adobe Acrobat or any install to clear PDF Title and Author properties. Open this tool in Microsoft Edge or Google Chrome, drop your PDF, and every property is stripped locally. The cleaned PDF downloads to your Downloads folder. No upload, no signup, no software to install.
Remove EXIF Data From Images Inside a PDF
PDFs often contain embedded images (photos, screenshots, scanned pages) — and those images can carry EXIF metadata: GPS coordinates showing where the photo was taken, camera make and serial number, original timestamps, and editing software. This tool scans your PDF for embedded images and reports what EXIF they carry, so you know what's leaking.
Strip Serial Numbers and GPS Coordinates From a PDF
PDFs generated by multi-function printers, scanned documents, and photographed content can carry embedded device serial numbers and GPS coordinates in the EXIF metadata of their images. This is a serious privacy leak — a single PDF can identify the exact device that scanned it and the location where a photograph was taken. Scan your PDF to see what it leaks.
Your PDF never leaves your device
Every operation runs as JavaScript in your browser tab. No upload endpoint exists. Verify it yourself in DevTools (F12 → Network).