I’d have a canary token url so I could see where my photo ended up and who was looking at it. I’d redirect through to a grabify link, then to an intermediate link that looked like malware but was actually a Rickroll.