Event startup Partiful wasn’t stripping GPS locations from user-uploaded photos

A critical privacy vulnerability was discovered in the Partiful event planning app, where GPS metadata embedded in user-uploaded images—including public profile photos—was not stripped upon upload.