Why an Offline Photo Organizer Matters for Family Photos
What a photo tool can learn from your library, what leaves your computer with an offline organizer (only optional place lookups), and what never does.
You just spent a weekend getting your photos out of Google. The first search result for "fix Takeout dates" is a website that asks you to upload them. That is the wrong direction.
What is in a photo library
More than pictures. A family library holds every child's face from birth, the inside of your home, the number plate of your car, and the GPS position of where you sleep. Metadata gives the exact minute you were away on holiday and the exact minute you got back. The Takeout sidecars add more: descriptions you typed, the names of people Google recognised, and the albums you sorted them into.
None of that is secret in the sense of a password. All of it together is a complete picture of a household. It is the sort of thing you would not hand to a stranger, and an upload site is a stranger with a server.
What an online tool does with it
To fix dates on a server, the server has to receive the files. That means your photos travel over the internet, sit on a disk you do not control, get processed, and come back. What happens to the copy afterwards depends on a privacy policy you did not read, written by someone who may not be around next year. Free web tools are often somebody's side project. The good ones delete promptly. You cannot check.
Browser extensions and tools that ask to sign in to your Google account are a different risk. They can read the library directly, which is convenient, and the permission usually covers everything, not only the photos you meant.
There is also the plain practicality. Uploading 200 GB to fix dates and downloading it again is slower than the export was.
What an offline tool needs
Nothing from the network. Reading a .json sidecar and writing a date into a JPEG is arithmetic on your own disk. exiftool has done it offline for twenty years. Converting HEIC to JPG, straightening a sideways photo, renaming and sorting into folders are all the same: local work on local files.
The one thing that genuinely needs the outside world is turning coordinates into a place name. Your photo knows it was taken at 48.8584, 2.2945. It does not know that is Paris. Something has to look that up, and the lookup table for the whole planet is not on your computer.
What Takeout JSON Metadata Fixer sends, and what it does not
Everything runs on your machine. Photos, videos and sidecars are read from your disk and written to your disk. Nothing about your files is uploaded. There is no account, no sign-in, and the licence key that unlocks unlimited photos is checked on your computer, not on a server.
The single exception is place names, and it is optional. If you choose a naming or folder template with a location in it, the app asks OpenStreetMap's Nominatim service what town sits at a set of coordinates. What goes over the wire is the coordinates, rounded to about a kilometre, and nothing else: no photo, no filename, no date, no account. Nearby photos share one lookup, so a week in one city is a handful of requests, not a thousand. Requests are spaced a second apart, as that service asks.
If you do not want even that, pick a template without a location, or turn place lookup off. The app then works with the network cable unplugged, which is a fair test of any tool that claims to be offline.
The rest is the same as the other guides on this site. It reads the Takeout sidecars and writes the real date and GPS into each photo, sorts and renames if you ask, handles Live Photo pairs and HEIC, and runs on macOS, Windows and Linux. Free for 500 photos, $9.99 once for unlimited.
The free offline alternatives
exiftool is the reference tool and it is completely offline. The exiftool guide shows the Takeout commands and their catches. GooglePhotosTakeoutHelper is a free script that wraps the same job and is also offline. digiKam is a free desktop library manager that reads EXIF and can do reverse geocoding, and it asks before it goes online for that. All three are good choices if you are comfortable with them.
The point is not this app against those. The point is any of these against a website that wants your photos.
How to check a tool yourself
Look for an account or sign-in step. An offline tool does not need one.
Read the privacy page, quickly. If it talks about servers, retention and encryption in transit, files are leaving your machine. An offline tool's privacy page is short because there is little to say.
Try it disconnected. Turn off Wi-Fi, run a small batch, and see whether it works. If it needs the network for anything beyond an optional lookup, it is not offline.
Check what it asks for on macOS. A tool that fixes files in a folder needs access to that folder. It does not need Photos library access, Contacts or your location.
Frequently asked questions
Is it safe to delete the .json sidecars after organizing?
Yes, once the dates and GPS are inside the photos. The sidecars also hold descriptions and people names, so if you want those, keep them or use a destination like Immich that reads them. Deleting them removes the people names from the export copy, which some people prefer.
Does the GPS stay in the photos?
If the sidecar has real coordinates, the app writes them into the photo's EXIF, because that is what makes place search work in your new library. If you would rather share photos without location, strip it when sharing; most phones and Apple Photos offer that on export.
What does the place lookup reveal to OpenStreetMap?
A coordinate pair rounded to about a kilometre, one request per distinct area, from your IP address. No filename, date or image. If that is too much, turn it off.
Is a Mac App Store app more private than a download?
Not necessarily, but the App Store version runs in Apple's sandbox, so it can only touch folders you explicitly open. The Windows and Linux builds are ordinary desktop programs. The network behaviour is the same on all three.