DeepFrame turns the metadata hidden inside an image into a clear, searchable report—camera, lens, location, capture settings, editing history, file structure, cryptographic hashes, raw tags, and more. Analysis runs in your browser; private history follows your account.
| Signal | What you get |
|---|---|
| Camera & lens | Device maker and model, lens model, focal length, aperture, shutter speed, ISO, flash, and exposure data when embedded |
| Location | Exact GPS coordinates and altitude when present, with location excluded from shared reports by default |
| Time & authorship | Capture time, modification time, artist, copyright, captions, keywords, and editorial fields |
| Editing history | Named software, XMP workflow data, Photoshop records, and other available processing traces |
| File identity | True format from magic bytes, MIME type, dimensions, megapixels, aspect ratio, size, and timestamps |
| Integrity | SHA-1, SHA-256, SHA-384, and SHA-512 fingerprints calculated locally with Web Crypto |
| Internals | JPEG segments, PNG chunks, RIFF blocks, ISO boxes, ICC profiles, maker notes, binary values, and raw decoded metadata |
Important: DeepFrame reports what is actually encoded in the file. It cannot recreate metadata that was removed by a social network, editor, screenshot, or export process.
Metadata tools often dump hundreds of cryptic tags and leave the interpretation to you. DeepFrame starts with the answer:
- A plain-English summary of the camera, time, location, and editing history
- Organized groups for EXIF, XMP, IPTC, ICC, maker notes, and file properties
- Searchable fields with readable values and preserved raw data
- One-click copy, native sharing, text export, and complete JSON export
- GPS hidden from shared reports by default
- Responsive, animated interface with reduced-motion support
DeepFrame analyzes image bytes in the browser, then stores the original and generated report in a private, user-scoped Supabase vault. Row-level security prevents one user from reading another user’s profile, history, or files.
flowchart LR
A[Signed-in user] --> B[Browser analysis]
B --> C[Readable report]
B --> D[Private source vault]
C --> E[Private account history]
E --> F[Cross-device access]
E --> G[Share or export]
style A fill:#111827,stroke:#22d3ee,color:#fff
style B fill:#0f172a,stroke:#8b5cf6,color:#fff
style F fill:#111827,stroke:#22d3ee,color:#fff
style G fill:#0f172a,stroke:#8b5cf6,color:#fff
- Passwordless email authentication, with Google and GitHub adapters ready for provider credentials
- Private source and cleaned-photo buckets with user-scoped storage policies
- Row-level security on every account table
- Server-enforced daily quotas and role-based administration
- Material security and product events only—no keystroke or mouse-movement recording
- Account history controls plus a separate permanent-deletion request flow
DeepFrame can surface exact locations and other sensitive details. It is built for legitimate inspection—not stalking, doxxing, covert tracking, harassment, or unauthorized surveillance.
The inspection workspace requires explicit acceptance of the DeepFrame Terms of Service and Privacy Policy. Declining keeps the tool locked. Repository copies live in TERMS.md and PRIVACY.md.
| Plan | Inspections | Metadata cleaning | Availability |
|---|---|---|---|
| Free | 1/day | — | Available now |
| DeepFrame Pro | 25/day | 10/day | Checkout coming soon |
| DeepFrame Studio | 250/day | 100/day | Checkout coming soon |
Unused daily access does not roll over. Administrators are outside plan limits, and every administrative account change is recorded in an audit log.
The cleaner removes privacy-bearing metadata blocks from JPEG, PNG, and WebP files without recompressing the encoded image pixels. Color data and image streams are preserved; users should still verify the output before publishing it.
DeepFrame recognizes and inspects metadata across common modern image containers:
JPEG · PNG · HEIC / HEIF · WebP · TIFF · AVIF · GIF · BMP
Browser support for previewing a format can vary, but DeepFrame can still inspect many embedded fields and container details directly from the file bytes.
- Node.js 22
- npm
- A Supabase project and publishable key
git clone https://github.com/ashermenachem/DeepFrame.git
cd DeepFrame
npm install
npm run devOpen http://localhost:3000.
Create .env.development.local with NEXT_PUBLIC_SUPABASE_URL and NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY. Apply the versioned migrations in supabase/migrations/ before using account features.
npm run lint
npm run build| Interface | Metadata & files | Tooling & delivery |
|---|---|---|
| Next.js 16 | ExifReader | TypeScript 5.9 |
| React 19 | Web Crypto API | Tailwind CSS 4 |
| Motion | Browser File APIs | oxlint + oxfmt |
| Supabase Auth | Private Storage + RLS | GitHub → Vercel |
app/
├── layout.tsx # Metadata, fonts, and global shell
├── page.tsx # DeepFrame entry point
├── login/ # Passwordless account entry
├── profile/ # Private history and account controls
├── admin/ # Audited administrative console
├── privacy/ # Privacy disclosure
└── globals.css # Visual system and motion
components/
├── photo-data-finder.tsx # Main product experience
├── deepframe-visual.tsx # Interactive hero visual
├── intro-sequence.tsx # Opening animation
├── auth-provider.tsx # Supabase session state
└── profile-dashboard.tsx # Account history and plans
lib/
├── photo-inspector.ts # Metadata, hashes, types, and structure
├── metadata-remover.ts # Lossless container metadata cleaner
├── legal.ts # Versioned legal disclosures
└── supabase/ # Browser, server, and proxy clients
supabase/
└── migrations/ # Database, RLS, quotas, storage, and audit rules
public/
├── brand/ # Mark, lockup, and social artwork
├── favicon.svg # Browser tab icon
└── icon-*.png # Installable app icons
main is the production branch. Every push flows through the connected Vercel Git integration:
Code change → GitHub commit → Vercel build → deepframesearch.vercel.app
Other pushed branches receive isolated preview deployments.
Thoughtful bug reports and ideas are welcome. Read CONTRIBUTING.md before opening an issue or pull request. For security concerns, follow SECURITY.md instead of posting publicly. Use of the source is subject to the license below.
DeepFrame is source-available, not OSI-approved open source. You may view and study the code, but you must receive prior written permission from Asher Menachem before copying, modifying, distributing, hosting, deploying, incorporating, or otherwise using it.
When permission is granted, products using DeepFrame code must give clear, reasonably prominent credit to DeepFrame by Asher Menachem with a link to this repository. Credit hidden only in source files, obscure documentation, legal boilerplate, or unusually small footer text is not sufficient.
Read the complete DeepFrame Source-Available License 1.0.
Built by Asher Menachem.
If DeepFrame helps you understand a file, consider starring the repository.