Local tools and their working subsets
The matrix below describes metadata cleaning, not every tool. Browse tools for each operation’s separate source, output, fidelity and device constraints. JPEG/PNG XMP editing, supported PDF properties/assets, text-only document conversion, five-sample video comparison, WAV stream copy and MP4 tx3g-to-VTT are explicitly bounded; they are not universal format support.
Compression, resizing and conversion share the cleaner’s selected files and Save controls. The default cleaner never applies these changes silently. Inspection is free; processing your files, including processed previews, needs the existing paid license.
- JPEG / JPG, PNG, WebP inputs
- Bounded still images only. JPEG and WebP lossy quality is adjustable. PNG defaults to lossless encoding and metadata removal. Optional lossy RGB reduction uses 32 levels/channel, at most 8 MP, without quantizing alpha; not indexed-palette encoding or guaranteed savings.
- HEIC / HEIF inputs
- Only files passing the prepared local decoder, structure, color and resource checks. PNG or JPEG output; explicit primary-photo/HDR-to-SDR effects. Native decoding alone is not a color-fidelity guarantee.
- Output checks
- Actual JPEG, PNG or supported WebP encoder, MIME/signature, dimensions, final-byte metadata cleaning and reopening. JPEG needs an explicit background color. No HEIC or video output.
- Geometry and resource bounds
- Proportions locked and enlargement off by default. No crop by default; explicit optional crop, rotate, flip and frame fitting are available. Up to 25 MiB and 50,331,648 source pixels; HEIC sides up to 8192. Source decoding is bounded before resizing and can still use substantial memory. Animation is rejected; JPEG secondary pictures need separate primary-only consent. Image editors remain at 8 MP. 32 MiB input is not enabled.
File support
PixelRinse identifies files by structure. This matrix shows which operation is available for each format, what it checks, and what can be downloaded.
“Cleaning supported” applies only to the operation described on that format’s card. Preserve operations may compare retained encoded data; Fresh Export decodes and re-encodes pixels. A successful conversion can retain visible content without producing pixel-identical output. Review each card’s verification and limits before choosing a file.
Supported file formats
JPEG
Container signature, structure, and supported metadata categories
- Supported embedded metadata and non-rendering container data
- Visible pixels
- Required rendering data
Lossless JPEG Container Clean (no re-encoding) or Fresh Export
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified.
Every entropy scan and required decoding structure is compared byte-for-byte; output metadata and trailer checks must pass
PNG / APNG
Container signature, structure, and supported metadata categories
- Supported embedded metadata and non-rendering container data
- Visible pixels
- Required rendering data
Preserve Quality or Fresh Export for still images; animations require Preserve Quality
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified.
Chunks are reparsed; animation structure is compared when present
GIF
Container signature, structure, and supported metadata categories
- Supported embedded metadata and non-rendering container data
- Visible pixels
- Required rendering data
- Frames, timing, looping, and transparency
Preserve Quality for still or animated files
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified.
Frames, timing, looping, transparency, and container structure are compared
WebP
Container signature, structure, and supported metadata categories
- Supported embedded metadata and non-rendering container data
- Visible pixels
- Required rendering data
Fresh Export for still images; Preserve Quality for animations
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified.
Still output is independently decoded; animation structure is compared
AVIF
Bounded single-image/page preflight and known EXIF/TIFF fields; always partial metadata scope
- Decoded still-image content is re-encoded; pixels, color and appearance may change
Conditional Fresh Export to PNG/JPEG only: bounded single-image container preflight and successful local decode required; explicit re-encoding/color-conversion consent. Preserve is unavailable.
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified. Local WebAssembly handles validated primaries/grids and transforms without native HEIC. Supported managed RGB ICC/P3/BT.2020 paths produce 8-bit SDR sRGB with possible gamut clipping and HDR tone mapping, never unchanged HDR. Bounded gain-map/depth auxiliaries are discarded with consent. Alpha, sequences, independent photos, nested grids, non-neutral tile crops and unresolved dependencies remain unavailable.
Output signature, metadata blocks and local decode checked separately; no unchanged-pixel or complete metadata claim.
HEIC / HEIF
Bounded single-image/page preflight and known EXIF/TIFF fields; always partial metadata scope
- Decoded still-image content is re-encoded; pixels, color and appearance may change
Conditional Fresh Export to PNG/JPEG only: bounded single-image container preflight and successful local decode required; explicit re-encoding/color-conversion consent. Preserve is unavailable.
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified. Local WebAssembly handles validated primaries/grids and transforms without native HEIC. Supported managed RGB ICC/P3/BT.2020 paths produce 8-bit SDR sRGB with possible gamut clipping and HDR tone mapping, never unchanged HDR. Bounded gain-map/depth auxiliaries are discarded with consent. Alpha, sequences, independent photos, nested grids, non-neutral tile crops and unresolved dependencies remain unavailable.
Output signature, metadata blocks and local decode checked separately; no unchanged-pixel or complete metadata claim.
TIFF
Bounded single-image/page preflight and known EXIF/TIFF fields; always partial metadata scope
- Decoded still-image content is re-encoded; pixels, color and appearance may change
Conditional Fresh Export to PNG/JPEG only: bounded single-image container preflight and successful local decode required; explicit re-encoding/color-conversion consent. Preserve is unavailable.
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified. Local WebAssembly handles validated primaries/grids and transforms without native HEIC. Supported managed RGB ICC/P3/BT.2020 paths produce 8-bit SDR sRGB with possible gamut clipping and HDR tone mapping, never unchanged HDR. Bounded gain-map/depth auxiliaries are discarded with consent. Alpha, sequences, independent photos, nested grids, non-neutral tile crops and unresolved dependencies remain unavailable.
Output signature, metadata blocks and local decode checked separately; no unchanged-pixel or complete metadata claim.
BMP
Container signature, structure, and supported metadata categories
- Supported embedded metadata and non-rendering container data
- Visible pixels
- Required rendering data
Fresh Export to a supported output format
Limits and verification conditions
25 MiB per file. JPEG Preserve validates encoded structure without requiring pixel decode. JPEG/PNG Fresh and HEIC primary photos are bounded to 50,331,648 pixels (50.3 MP), 8192 pixels per side. HEIC separately allows 64M primary coded-tile pixels and 20M discarded auxiliary coded pixels, at most 256 items, and a conservative 1536 MiB allocation guard. AVIF/TIFF retain their 40 MP subsets. These are refusal bounds, not a guarantee of browser memory safety. Full 48 MP exports have generated-fixture desktop evidence only, with substantial memory use even after cancellation/retry improvements. Physical iPhone memory, Photos/Files delivery and saving remain unverified.
New output signature and output decode
PDF header, cross-reference marker, startxref, and end marker; full parser validation occurs during cleaning
- Document-info metadata
- XMP metadata
- Pages and visible content
- Supported navigation and accessibility structures
Preserve Quality only
Limits and verification conditions
25 MiB; encrypted, signed, active, attached, or unsupported structures are rejected
Reparsed metadata and supported semantic inventories
DOCX
ZIP package signature and required OOXML parts
- Core, application, and custom document properties
- Document content
- Detected comments or review data
- Metadata inside embedded media unless separately supported
Preserve Quality only
Limits and verification conditions
25 MiB; encrypted, macro-enabled, signed, malformed, and unsupported packages are rejected
Package relationships, required parts, and supported structural inventories
PPTX
ZIP package signature and required OOXML parts
- Core, application, and custom document properties
- Document content
- Detected comments or review data
- Metadata inside embedded media unless separately supported
Preserve Quality only
Limits and verification conditions
25 MiB; encrypted, macro-enabled, signed, malformed, and unsupported packages are rejected
Package relationships, required parts, and supported structural inventories
XLSX
ZIP package signature and required OOXML parts
- Core, application, and custom document properties
- Document content
- Detected comments or review data
- Metadata inside embedded media unless separately supported
Preserve Quality only
Limits and verification conditions
25 MiB; encrypted, macro-enabled, signed, malformed, and unsupported packages are rejected
Package relationships, required parts, and supported structural inventories
ZIP archive
Central/local records, names, paths, sizes, compression, encryption, CRCs, overlaps, expansion totals, and nested entries
- Optional source-path fields, archive comments, and precise timestamps
- Supported metadata inside verified entry outputs
- Entry names
- Unresolved entries in partial output
Partial archive or verified-output-only archive
Limits and verification conditions
25 MiB compressed; 2,000 entries; 100 MiB expanded; 25 MiB per entry; 3 nested levels
Reopened ZIP, CRC and limit checks, and exact policy/inclusion comparison
TAR archive
Bounded TAR headers, checksums, names, types, sizes, sparse entries, duplicates, and nested entries
- Optional ownership, user/group, device, link-target, and precise timestamp metadata
- Entry names
- File bytes
- Unresolved entries in partial output
Partial archive or verified-output-only archive
Limits and verification conditions
25 MiB archive; 2,000 entries; 100 MiB expanded; 25 MiB per entry; 3 nested levels
Reopened TAR, checksum and limit checks, and exact policy/inclusion comparison
RAR archive
Container signature only
- All entries and archive metadata
No cleaned output
Limits and verification conditions
Archive rebuilding is not implemented for this container
No output is created
7z archive
Container signature only
- All entries and archive metadata
No cleaned output
Limits and verification conditions
Archive rebuilding is not implemented for this container
No output is created
OpenDocument Text (ODT)
Bounded package inventory plus properties, comments/notes, hidden content, links, embedded objects, and signatures
- Properties
- Visible document content
- Comments and notes
- Hidden content
- Links
- Embedded objects
- Digital signatures
No cleaned output; review in a trusted native desktop application
Limits and verification conditions
25 MiB compressed; at most 2,000 entries, 100 MiB expanded, and 25 MiB per inspected XML part
No output is created
OpenDocument Spreadsheet (ODS)
Bounded package inventory plus properties, comments/notes, hidden content, links, embedded objects, and signatures
- Properties
- Visible document content
- Comments and notes
- Hidden content
- Links
- Embedded objects
- Digital signatures
No cleaned output; review in a trusted native desktop application
Limits and verification conditions
25 MiB compressed; at most 2,000 entries, 100 MiB expanded, and 25 MiB per inspected XML part
No output is created
OpenDocument Presentation (ODP)
Bounded package inventory plus properties, comments/notes, hidden content, links, embedded objects, and signatures
- Properties
- Visible document content
- Comments and notes
- Hidden content
- Links
- Embedded objects
- Digital signatures
No cleaned output; review in a trusted native desktop application
Limits and verification conditions
25 MiB compressed; at most 2,000 entries, 100 MiB expanded, and 25 MiB per inspected XML part
No output is created
SVG
Non-rendering markup scan for metadata, scripts, event handlers, external resources, links, and embedded content
- All markup, active content, links, metadata, embedded data, and visible content
No cleaned output; do not open untrusted SVG in a browser
Limits and verification conditions
25 MiB; markup is never rendered and external references are never fetched
No output is created
Camera RAW
Recognized TIFF-based or camera-specific RAW signature
- Original sensor data
- Preview images
- Camera metadata
- All original file bytes
No cleaned output; develop a copy with a trusted local RAW processor
Limits and verification conditions
Original RAW is left untouched; no reliable bundled local decoder is available
No output is created
RTF
RTF header and control-word categories
- Visible text
- Document information
- Fields and links
- Objects
- Revisions
- Hidden text
No cleaned output; review and save a copy in a trusted desktop editor
Limits and verification conditions
Control words are inspected without interpreting or rendering document content
No output is created
Plain text
Text encoding plausibility and visible-content policy
- All visible text content
No cleaned output; manually review and redact a copy
Limits and verification conditions
Sensitive information is generally content, not an EXIF-style metadata block
No output is created
CSV
Delimited-text structure and formula-like cell categories
- Headers, cell values, formulas, links, and all visible content
No cleaned output; manually review values and formulas in a trusted editor
Limits and verification conditions
Delimiter detection is heuristic; cells are never calculated
No output is created
Legacy Word (DOC)
OLE Compound File signature and format-specific stream names
- Properties
- Visible content
- Hidden content
- Revisions or notes
- Formulas or fields
- Links
- Embedded objects
- Macros
No cleaned output; use a trusted native desktop application for review
Limits and verification conditions
Binary streams are not executed, converted, or rewritten
No output is created
Legacy Excel (XLS)
OLE Compound File signature and format-specific stream names
- Properties
- Visible content
- Hidden content
- Revisions or notes
- Formulas or fields
- Links
- Embedded objects
- Macros
No cleaned output; use a trusted native desktop application for review
Limits and verification conditions
Binary streams are not executed, converted, or rewritten
No output is created
Legacy PowerPoint (PPT)
OLE Compound File signature and format-specific stream names
- Properties
- Visible content
- Hidden content
- Revisions or notes
- Formulas or fields
- Links
- Embedded objects
- Macros
No cleaned output; use a trusted native desktop application for review
Limits and verification conditions
Binary streams are not executed, converted, or rewritten
No output is created
MP3
ID3 frame inventory and bounded MPEG audio frame walk
- Allowlisted descriptive ID3v2.3/v2.4 and ID3v1 metadata
- MPEG audio frames; every other ID3 frame class makes the file inspection-only or unsupported
Preserve Quality only; content conversion is not offered
Limits and verification conditions
25 MiB; malformed, specially encoded, encrypted, signed, content-bearing, playback-affecting, and unknown ID3 modes fail closed
Output is reparsed and every MPEG audio byte is directly compared with the source
WAV
Complete RIFF chunk walk plus PCM/IEEE-float format, byte-rate, block-alignment, and sample-frame checks
- RIFF INFO, ID3, XMP, Broadcast Wave, iXML metadata, and optional filler/padding chunks
- Format, PCM/float sample bytes, and fact data
Preserve Quality for the validated PCM/float subset; other WAV structures are inspection-only
Limits and verification conditions
25 MiB; cue/play lists, unknown chunks, unsupported encodings, and malformed sample layout do not produce output
Output is reparsed and every retained chunk byte is directly compared with the source
FLAC
Bounded FLAC metadata-block walk; audio-frame validity is not claimed
- All metadata, audio, artwork, cue/chapter data, and unknown structures
No cleaned output; full browser-safe audio-frame validation is not implemented
Limits and verification conditions
25 MiB; malformed container boundaries fail
No output verification
M4A
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
AAC
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
OGG
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
MP4
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
MOV
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
M4V
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
WebM
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
MKV
Bounded container checks plus category signals where the implemented recognizer can identify them
- All streams, tracks, metadata, chapters, subtitles, attachments, and artwork
No cleaned output; reliable local conversion and fidelity verification are unavailable
Limits and verification conditions
25 MiB; signature-level recognizers do not claim complete structural validity
No output verification
AVI
Complete top-level RIFF chunk walk with required AVI header and media lists
- Trailing RIFF INFO metadata
- All AVI header, stream, media, index, padding, and unknown chunks
Preserve Quality only when INFO metadata follows all structural content
Limits and verification conditions
25 MiB; missing required lists or metadata before later structural chunks cannot produce output
Output is reparsed and every retained top-level chunk byte is directly compared; opaque retained chunks require review
Unrecognized file
Leading bytes did not match a registered structure
- Entire original file
No cleaned output
Limits and verification conditions
Renaming the file does not add support
No output verification
Ready to inspect a file?
Inspection is free and happens before PixelRinse offers any cleaned output.