What your files and your account say about you, and how to say less - metadata and account checks.
| # | Bot | Price | Languages | Inline | Groups | Score |
|---|---|---|---|---|---|---|
| 1 | @SpamBot | Free | MULTI | no | no | 86 |
| 2 | @ExifCleanerBot | Free | EN | no | no | 77 |
| 3 | @EURegulation | Free | EN | no | no | 72 |
| 4 | @sanitizeurlbot | Free | — | no | yes | 70 |
| 5 | @clean_urls_bot | Free | — | no | yes | 62 |
We sent each bot a photo taken on a phone as a compressed image and again as a file, then a short video, and compared what the reply exposed and what it removed. We also checked what the bot itself asks for, whether it explains what it stores, and whether anything requires a phone number.
Telegram strips metadata from a photo sent as a compressed image, and does not when the same photo is sent as a file - which is exactly how people share full quality. Video keeps its block either way. So the practical rule is: anything you send as a file, and anything you publish outside a chat, should go through a cleaner first. A holiday photo, a flat listing, a picture sent to a stranger from a marketplace - all of them carry the point they were taken at.
A bot in this category is a strange thing to trust: you hand it the very file you are trying to protect. Prefer ones that state what they keep, that ask for nothing beyond the file, and that never request a phone number or a login code - no legitimate privacy tool needs either. Treat any bot promising to delete an account, unlock a restriction or reveal who reads your messages as suspect until proven otherwise.
Metadata cannot be recalled from a post someone already downloaded. Clean the file first; the whole category costs one extra step and prevents the kind of leak that is impossible to undo.
It does for a compressed photo, but not for the same image sent as a file, and video keeps its metadata either way.
The file leaves your device, so use these bots for what you are about to publish anyway - not for material that must never be seen by a third party.
Anything that asks for a phone number or a login code, or promises to unlock, delete or spy on an account - those are the standard shapes of a phishing bot.