Protecting Stock Photos and Presets You Sell Online
Short answer: You can't stop a buyer from unzipping a digital download and sharing it, but you can make the valuable image and PDF files in that pack traceable. Give each buyer their own invisibly marked copies of the preview images, sample photos and any PDF guide. If those files show up on a free-download site or a Discord, you upload what you found and see which buyer's copy it came from. Preset files themselves (XMP, DNG, or anything else that is not an image, PDF or video) do not get a visual watermark. A ZIP can carry a fragile package mark, but that mark does not survive unzipping. Be honest about that, and use marked samples plus clear license terms as the deterrent.
Last updated: October 12, 2026. This is a practical guide for creators who sell digital downloads, not legal advice. License wording, refunds and enforcement depend on your terms and jurisdiction.
This is not the same as a paid content pack
If you sell photo sets, illustration packs or other image-heavy downloads as a finished product, the sibling guide how to protect paid content packs from leaks covers the general flow. This article is for a narrower audience:
- Stock photo sellers on their own shop, Etsy, Gumroad or similar, where buyers get JPEG, PNG or WebP files (and sometimes a PDF license or lookbook).
- Lightroom, Capture One or camera-raw preset sellers, where the real product is often a ZIP of XMP or DNG files plus a cover image, before/after samples and a short PDF guide.
- Digital download sellers who mix both: a pack of photos and presets, or templates sold with preview images.
The difference that matters: a leaked XMP or DNG file, once it has been taken out of the ZIP, cannot be traced. Markedfile marks PNG, JPEG, and WebP images and PDFs with a visual pattern. It can also put a fragile package mark on a ZIP (and on DOCX or XLSX). Other binaries, including XMP and DNG, come back inside a marked ZIP. Detecting the bare preset does not resolve: you would have to submit that marked ZIP wrapper, and the package mark does not survive unzipping, screenshots or content extraction. Saying the preset file itself is watermarked would be wrong. What you can protect are the files buyers actually share when they leak a pack: the previews, the sample photos that prove the look, and the PDF that explains how to install.
Why stock and preset packs leak
Digital downloads are frictionless to copy. One buyer posts the ZIP in a group, another mirrors it on a free site, and within a week your pack is available everywhere with your name still on the cover.
Usual defenses and their gaps:
- A single download link or password — shared along with the files.
- A visible watermark on public previews — good for the storefront; useless once the buyer has the clean paid files. See visible vs invisible watermarks.
- License text in a PDF — important for your terms; it does not identify whose copy was shared.
- Takedowns — remove one host after the fact; they don't tell you which order started it.
What most shops lack is a way to answer: whose copy of this preview, sample or guide is this?
Mark
Share
Leak
Detect
What Markedfile can and cannot mark in a stock or preset pack
Markedfile applies the same idea when you deliver digital downloads one buyer at a time. File contents are processed in memory and are not stored. Every supported file also gets an HMAC metadata mark for that workspace.
| File in your pack | Can Markedfile mark it? |
|---|---|
| Preview or cover JPEG, PNG, or WebP | Yes, with the visual pattern |
| Sample and before-after photos | Yes |
| Full-resolution stock photos you sell as the product | Yes |
| PDF install guide, lookbook or license sheet | Yes. The PDF mark is invisible. PDFs marked before that change aren't compatible, so re-mark them |
| Motion preview or demo (MP4, MOV, WebM, MKV) | Yes, Business and Enterprise only (up to 10 minutes and 100 MB; the download is MP4) |
| XMP, LRTEMPLATE and similar preset files | Not as a traceable preset. They come back inside a marked ZIP. The extracted preset has no visual watermark |
| DNG or RAW used as a preset | Not as a preset binary. A photo exported as PNG, JPEG, or WebP is an image and can be marked |
| The ZIP, or a DOCX or XLSX | A fragile package mark. It does not survive unzipping, screenshots or content extraction, and it does not watermark the files inside |
| PSD, AI or Sketch source | Export to PNG, JPEG, WebP or PDF first. Other binaries come back inside a marked ZIP |
Practical rule for preset packs: mark every valuable preview and sample image, plus the PDF guide. Deliver a per-buyer ZIP that contains those marked files together with the unmarked XMP or DNG. The leak that hits free-download sites is almost always the preview set or the lookbook — and those are what you can trace. For the presets themselves, rely on license terms and order records. Sharing a pack that includes your marked samples is what becomes traceable.
For the technique behind the mark, see what is forensic watermarking.
How to protect digital downloads before you deliver them
- Split the pack into markable images or PDFs, and everything else. Put preview images, sample photos and PDFs in the first group. Put XMP, DNG and other preset binaries in the second.
- Create one marked copy per buyer for every markable file. In Markedfile, label each copy with a neutral code (order number, or SKU plus order id) — not the buyer's email in the filename they see. Identifiers are 1–32 characters.
- Build one ZIP (or download folder) per buyer that mixes their marked images and PDFs with the shared unmarked preset files. Do not ship one shared ZIP of unmarked masters to everyone.
- Keep a private map of code to order, email and platform (Etsy, Gumroad, your shop). Markedfile identifies the copy; your map connects it to a sale.
- Deliver through the channel you already use — automated email, a Gumroad or Etsy download, or a per-order Drive folder. Avoid a single public link to an unmarked master ZIP.
- Say so in your license or product page (have a lawyer review the wording): each download includes individually marked preview and documentation files, and sharing breaks the license. Do not claim the XMP or DNG files are watermarked.
- When a leak shows up: save where and when you found it, download the best version you can (the original file beats a screenshot), and upload it to Detect. Markedfile reports which recipient code it matches and a confidence score.
For shops that fulfill many orders, Business and Enterprise include an API (POST /api/v1/mark and POST /api/v1/detect, video included) so marking can sit inside your delivery script; see the docs.
Free, Starter, and Pro cover images, PDFs, text files, and ZIP packages. They do not include video or the API.
A very small crop can miss
What a match tells you (confidence scores)
A match is a reported confidence score, not a verdict and not legal proof:
| What you upload | Typical reported score |
|---|---|
| The exact marked file | about 99% |
| A file where only the signed metadata survived | 95% |
| A re-saved JPEG or a screenshot (visual pattern only) | about 81% |
| A video matched by the frame pattern alone (Business and Enterprise) | at or below 85% |
Detection is never 100%. Marketplace re-uploads and Discord screenshots are the common case for creators, so expect the visual-pattern score more often than the exact-file one. A visual-only score stays under 90%. Metadata (an HMAC mark per workspace) is often stripped by platforms and by screenshots — the pixel pattern is what usually remains on images and PDFs.
| A match can support | A match does not prove |
|---|---|
| Which marked copy the leaked image or PDF came from | That the named buyer leaked it on purpose |
| Which order code you assigned | That nobody else had their download link or device |
| A lead for a refund denial, access cut-off or warning under your terms | Anything about an extracted XMP or DNG from the same ZIP |
| That a lookalike preset rebuilt from scratch copied your files |
That last row matters for presets: if someone recreates your look without using your marked samples, there is no marked file to detect. Marking traces copies of your files, not a style.
For photo-specific leak workflows, see how to find out who leaked your photos.
After a match
- Start privately with the buyer tied to that order code. Ask what happened before you escalate.
- Separate accidents from intent. A shared household computer is different from a ZIP posted on a piracy forum.
- Act only within your terms: refuse a refund, revoke future updates, or send a warning if your license allows it.
- Request a takedown of the hosted leak if you want it removed; the match is supporting context, not a court finding.
- Don't accuse anyone publicly based only on a score.
Limits (read these before you promise buyers anything)
- Only files marked before delivery can be traced. An old unmarked master ZIP that already leaked cannot be recovered. Mark the next release.
- XMP, DNG and other preset binaries are not visually watermarked. Don't claim they are. Mark samples and PDFs. A ZIP package mark is fragile and does not survive unzipping.
- Crops: roughly 256 px of a detailed area is the approximate minimum. Smaller or flatter areas can fail. That is a rough guide, not a ceiling.
- Small images: Images and video frames under 96×96 px are rejected; everything else uses the same pattern.
- Rotation: most 90° rotations are fine. A rotation combined with strong, uneven stretching can break detection.
- PDF screenshots: A PDF screenshot is best effort and is not guaranteed. It can be checked if it shows the top half of a text page with margins, about 200 points square on a ticket, about 320 points square on a slide, or about 160 points square on a photograph. Dense text alone isn't detected — upload the PDF when you have it.
- Video (Business and Enterprise only): The same pattern is written on every frame. It still reads after H.264 re-encoding up to CRF 23, a trim, a slow zoom, or a downscale to 1280×720 or 854×480, even with the metadata stripped. A picture-only match stays at or below 85% confidence. One exported frame is a weaker check. Signed metadata adds confidence when it is kept. Deleting the record ends detection. Free, Starter, and Pro have no video.
- Heavy edits, blur, filters or redrawing can destroy the mark.
- It doesn't stop sharing. It makes sharing a marked image or PDF traceable.
FAQ
Can Markedfile watermark my Lightroom XMP presets? No. XMP (and similar preset formats) are settings files, not images or PDFs. If you upload one, it comes back inside a marked ZIP, and that package mark does not survive unzipping. Mark the cover, before/after samples and any PDF guide, zip those marked files with the unmarked presets per buyer, and state in your license that the previews and documentation are individually marked. Do not say the XMP is watermarked.
What about a ZIP of stock photos? Yes for the photos and any PDF inside — create one marked set per buyer, then zip. The ZIP wrapper itself only gets a fragile package mark, which does not survive unzipping. Don't ship one shared unmarked ZIP.
Will buyers notice the invisible mark on previews? It's designed to be invisible at normal viewing size. Compare original and marked on a screen you trust, especially for skin tones and gradients in beauty or fashion stock.
Should I still put a visible watermark on public storefront previews? Yes for the free public thumbnails on Etsy, Gumroad or your site. For the paid files, most sellers prefer a clean look plus an invisible mark. More in visible vs invisible watermarks.
Can I trace a screenshot of my sample photo from Discord or Telegram? Often, within limits. Screenshots strip metadata, so you rely on the visual pattern (about 81% reported confidence for a typical screenshot). Very small crops, heavy compression or edits can make it fail. Roughly 256 px of a detailed area is the approximate minimum. Detection is never 100%.
What if someone already leaked my pack unmarked? Markedfile can't trace that copy. Use it for the next release and for every new order going forward.
Which plan do I need? Free: 5 active files, detectable for 6 months, up to 5 MB per file, PDFs up to 10 pages. Starter ($9.99/month): 50 active files, up to 10 MB, PDFs up to 50 pages. Pro ($19.99/month): no active-file cap, up to 20 MB, PDFs up to 100 pages. Business ($49.99/month): one shared workspace, up to 100 MB, PDFs up to 500 pages, video, and the API. Enterprise: custom quote, with video and the API. See pricing.
Does Markedfile keep my photos or presets? No. File contents are processed in memory and are not stored. Deleting the record ends detection.
Disclaimer
This article is not legal advice. Markedfile does not decide whether a license was breached, whether you owe a refund or what remedies you have. It only helps identify which marked copy a leaked image, PDF (or, on Business and Enterprise, video) appears to come from. Talk to a lawyer before you act on a match.
Before your next drop
List the markable files in the pack (previews, samples, PDF), create one marked set per buyer in Markedfile, zip with the unmarked presets if any, keep the code-to-order map private, and deliver. If a sample hits a free-download site, you'll have a lead instead of a guess. Start on personal or compare plans on pricing.
Mark each copy before you share it
Create a free account. You can mark 5 files and see whose copy leaked.