See the invisible information left in your attachments, before you send.
Photo GPS, PDF authors, Word tracked changes, Excel hidden sheets — checked inside your browser the moment you attach a file. Your files are never sent anywhere.
Opens the Chrome Web Store
Supported: JPEG · PNG · WebP / PDF / Word / Excel
USE CASES
Information that never surfaces when you reread a document still travels with it. The list appears the moment you attach.
A document built by copying an older one keeps the older author and company in its properties. Attaching it lists the title, author, company and producing app, so it does not go out under the wrong name.
Switching the display off does not remove the revisions. Insertions, deletions, comments, the author and the last person to edit all appear, so you can tell whether your internal back-and-forth is still readable.
Reusing a workbook with another client’s figures merely hidden hands those sheets over along with it. Hidden and very-hidden sheets, hidden rows and columns, and defined names are all listed.
Photos often carry the coordinates of where they were taken. Before a shot from home or the office goes up as it is, you can see whether GPS location, capture time and camera model are still attached.
The files you did not write are the ones whose properties you know least about. A look at the list before you forward catches the sender’s internal details before they reach a third party.
Step-by-step procedures for individual jobs live on the use-case pages.
Features
Safe Attachment Check is not a tool that automatically deletes, edits, or sanitizes files. It shows the information that may remain in an attachment, and leaves the decision to send with you.
Reading the file and parsing its metadata happen entirely inside your browser.
No server, no analytics, no telemetry — network connections are forbidden by construction.
It deletes, strips, and changes nothing. Your file stays untouched, byte for byte.
It never stops or interrupts your send. It just shows a small card.
WHAT IT DETECTS
The things you usually notice only after sending — listed before you send. Here is what it can surface per file type.
Photos can carry where they were taken and the gear that took them.
Authoring details and how many annotations are embedded.
Tracked changes and comments that are easy to forget before sharing.
Sheets, rows, and columns you cannot see may still hold data.
GPS coordinates are shown as plain numbers. There is no reverse geocoding — that would require a network request, and this extension makes none.
HOW IT WORKS
Just attach a file the way you always do. Only when hidden information is found does a small card appear in the corner of the page.
On any site — webmail, chat, a job application form — attach it the way you always do. It watches two paths.
If nothing is found, nothing appears (you can opt into an every-time card in settings).
The metadata it found is shown right there, grouped by type — with the actual values in view.
Read the card and send — or reconsider. Either way, your upload is never interrupted.
GET STARTED
What you can see per file type — and how to tailor it in settings.
Attach a JPEG and the card lists its GPS position, capture time, and camera details.
Attach a .docx and review tracked changes, comments, author, last-modified-by, and company.
Attach an .xlsx and see hidden sheets, hidden rows and columns, comments, and defined names.
Toggle individual file types, disable checking on sites you trust, or turn on an all-clear notice when nothing is found.
The card appears in the corner of the page; read it and close it. Your upload is unaffected.
PRIVACY
Because it exists to help you confirm, it never takes custody of the file’s contents.
The contents of your file never leave this extension.
Reading finishes on your device and is used only to show you the metadata — never transmitted, stored, or collected.
Where data lives
Only your settings are stored on your device (chrome.storage.local). File contents are never saved.
External traffic
No server, no analytics, no telemetry. A CSP forbids network connections, and a build-time check rejects any code that names a network API.
Location handling
GPS coordinates are shown as plain numbers. There is no reverse geocoding to a street address.
Permissions needed
Only settings storage (storage). It requests no host permissions.
MORE TOOLS
Published tools that also act before you send.
Free and fully local. Available now on the Chrome Web Store.
No external sending · Never modifies files · Fully local
LEGAL
Our privacy promises and usage rules are collected in the documents below.