GDPR-compliant image optimization for WordPress – the overview without a forced cloud
Which WordPress image optimization runs without a cloud upload? The overview: local plugins, cloud services with EU servers, and the difference for processing on behalf of the controller.
WordPress image optimization runs either locally on your own server or in a provider’s cloud. Local means: no image leaves the site, no processing on behalf of the controller, no account. Cloud means: every image is transferred to the provider – even with EU servers, that is processing on behalf of the controller with a DPA and a server-location question. IMG Performer and Converter for Media run locally; ShortPixel, Imagify and Optimole are cloud services; EWWW can do both. Of these, only IMG Performer covers EU AI Act labelling.
Local vs. cloud – the legal difference
If an image is transferred to an external service for optimization, that is processing on behalf of the controller. It then requires a data processing agreement, clarity about the server location and – for providers outside the EU – a legal basis for the third-country transfer. With local processing, this drops out entirely for image optimization.
”EU servers” is also processing on behalf of the controller
Imagify hosts in France, EWWW’s cloud API in the EU, and both offer a DPA. That lowers the risk compared with US services, but it does not remove the processing arrangement as such: the image still leaves your own site.
| IMG Performer | Converter for Media | EWWW Image Optimizer | ShortPixel | Imagify | Optimole | |
|---|---|---|---|---|---|---|
| Vendor | Enfants Terribles digital GmbH (Hamburg) | – | – | ShortPixel | WP Media (France) | ThemeIsle |
| Processing | local, on your own server | local | local possible, better compression + AVIF via cloud API (EU server) | cloud – every image is uploaded to ShortPixel | cloud (servers in France) | cloud / CDN |
| Account required | no | no | no (local) / yes (cloud API) | yes | yes | yes |
| AI model (alt text) | your choice – Mistral (France) recommended | – | – | – | – | – |
| Billing | license, no quota | – | cloud API by credits/bandwidth | credits – several per image depending on settings (main format, WebP, AVIF, thumbnails) | credits by data volume | by visitor count |
| Data protection | no image transfer to third parties; DPA only for the optional alt-text AI | – | – | data processing agreement; DPA and sub-processor list available, but cloud processing | DPA available, provider based in France | – |
| EU AI Act Art. 50 | yes, already in the free version | no | no | no | no | no |
| WebP / AVIF | yes (AVIF in Pro) | yes (AVIF in Pro) | yes (AVIF via cloud API) | yes | yes | yes (via CDN) |
| AI alt text | yes (Pro, your own API key, no credit cap) | no | no | yes, via a separate credit quota (100/month free, unlimited tier $9.99/month) | no | no |
| AI image detection | automatic (C2PA, EXIF, AI-tool signatures) | – | – | – | – | – |
| Marker in all image sizes | yes – machine-readable marker in every size incl. WebP/AVIF | – | – | – | – | – |
| Visible label | yes, customizable design (Pro) | – | – | – | – | – |
| Platforms | WordPress | – | – | – | – | – |
| Cost | Free · Pro €69/year or €9/month | Free · Pro (price on vendor site) | local free · cloud API from $80/year | Free 100 credits/month · from $3.99/month · one-time packs from $19.99 | Free 20 MB/month · Growth $5.99/month · Infinite $11.99/month | Free up to ~1,000 visits/month · paid from ~$22.52/month (verify pricing before publishing) |
Last verified: August 2026. The current vendor pages are authoritative.
The local options
- IMG Performer – local, no account, plus EU AI Act Art. 50 labelling and optional AI alt text through your own key.
- Converter for Media – local, no account, pure format conversion without alt text or AI labelling.
- EWWW – local basic optimization without an account; better compression and AVIF use the cloud API.
When a cloud solution still fits
Anyone who wants to process a very large library in one go or get a CDN from one source, and is fine with the processing arrangement, will find solid tools in ShortPixel, Imagify or Optimole. For data protection as a priority and the EU AI Act labelling in one step, local processing is the better path.
Disclaimer
Note: Information on features and prices – including those of IMG Performer – reflects our knowledge at the time of publication and may change. We accept no liability for its accuracy. The current product and pricing pages of the respective providers are authoritative; information on IMG Performer is available at img-performer.enfants.de. The guidance on the labelling obligation under Article 50 of the EU AI Act is not legal advice – original text: eur-lex.europa.eu/eli/reg/2024/1689/oj.
Frequently asked questions
Is ShortPixel GDPR-compliant?
ShortPixel offers a DPA and a sub-processor list. The images are still transferred to the cloud for processing; the server location is not clearly communicated.
Do I need a DPA with local processing?
Not for image optimization – no images are transferred to third parties. Only IMG Performer's optional AI alt-text feature needs an agreement with your chosen AI provider.
Is local processing slower?
Conversion runs in the background and does not affect page delivery. The one-time batch run for a large existing library takes longer than through a cloud.