GeoCloak protects image location privacy by hiding key clues
GeoCloak: An Agentic Framework for Semantics-Preserving Geolocation Privacy via Peripheral Clue Manipulation
Computer Vision and Pattern RecognitionArtificial IntelligenceCryptography and Security
Summary
Images can reveal where they were taken, even if location data is removed, because visual signs like street names give it away. The authors found these location clues often appear at the edges of photos and proposed GeoCloak, a tool that edits or hides these clues without ruining the overall picture. GeoCloak works by spotting these clues, making targeted changes to hide them, and adding extra tweaks to confuse location detectors, while keeping the picture looking natural. Tests show GeoCloak reduces the chance of correctly guessing the city from an image better than existing methods, while keeping the image clear and useful.
What this means in practice
- •For mobile app developers: Integrate GeoCloak to automatically obscure location cues in user-shared photos to enhance privacy without degrading image quality.
- •For social media companies: Deploy GeoCloak as a privacy filter to reduce users' unintended location exposure from uploaded images.$Commercial implications: Offers a privacy-enhancing service that protects users' location data on social platforms, meeting rising data safety demands.
Authors
Yixin Wu, Mingjie Li, Yun Shen, Michael Backes, Yang Zhang
Abstract
The rapid advancement of large vision language models (LVLMs) has made geolocation inference from images highly accurate and accessible. This poses serious privacy risks: a passive adversary with black-box LVLM access can infer a user's location from a single photo with no metadata. Existing protection methods rely almost exclusively on adversarial perturbation, which introduces perceptible visual artifacts and utility degradation. We identify the visual-geolocation asymmetry: geolocation-decisive clues, such as street signs, tend to be visually peripheral but dominate location inference. Exploiting this asymmetry, we propose GeoCloak, an agentic framework for semantics-preserving geolocation privacy protection. It acts as a clue-aware planner that analyzes each image to identify geolocation-relevant clues, dispatches targeted semantic edits to directly suppress peripheral clues, and autonomously configures adversarial perturbation to further suppress residual geolocation features, all under iterative utility-aware feedback. We evaluate GeoCloak on four diverse datasets spanning 108 countries and 576 cities against five LVLMs and three inference methods. GeoCloak reduces overall city-level accuracy from 41.2% to 9.9%, approximately half of the best-performing baseline, while achieving substantially superior utility preservation both qualitatively and quantitatively. We hope this work takes a meaningful step toward practical, semantics-preserving geolocation privacy protection, giving users greater control over the location information inadvertently embedded in their shared images.