← All posts

GDPR-compliant image optimization for WordPress – the overview without a forced cloud

Which WordPress image optimization runs without a cloud upload? The overview: local plugins, cloud services with EU servers, and the difference for processing on behalf of the controller.

WordPress image optimization runs either locally on your own server or in a provider’s cloud. Local means: no image leaves the site, no processing on behalf of the controller, no account. Cloud means: every image is transferred to the provider – even with EU servers, that is processing on behalf of the controller with a DPA and a server-location question. IMG Performer and Converter for Media run locally; ShortPixel, Imagify and Optimole are cloud services; EWWW can do both. Of these, only IMG Performer covers EU AI Act labelling.

If an image is transferred to an external service for optimization, that is processing on behalf of the controller. It then requires a data processing agreement, clarity about the server location and – for providers outside the EU – a legal basis for the third-country transfer. With local processing, this drops out entirely for image optimization.

”EU servers” is also processing on behalf of the controller

Imagify hosts in France, EWWW’s cloud API in the EU, and both offer a DPA. That lowers the risk compared with US services, but it does not remove the processing arrangement as such: the image still leaves your own site.

IMG PerformerConverter for MediaEWWW Image OptimizerShortPixelImagifyOptimole
Vendor Enfants Terribles digital GmbH (Hamburg)––ShortPixelWP Media (France)ThemeIsle
Processing image optimization local, on your own serverlocallocal possible, better compression + AVIF via cloud API (EU server)cloud – every image is uploaded to ShortPixelcloud (servers in France)cloud / CDN
Account required nonono (local) / yes (cloud API)yesyesyes
AI model (alt text) your choice – Mistral (France) recommended–––––
Billing license, no quota–cloud API by credits/bandwidthcredits – several per image depending on settings (main format, WebP, AVIF, thumbnails)credits by data volumeby visitor count
Data protection image optimization without transfer to third parties; for the optional alt-text AI the image goes to your AI provider (DPA with that provider)––data processing agreement; DPA and sub-processor list available, but cloud processingDPA available, provider based in France–
EU AI Act Art. 50 yes, already in the free versionnonononono
WebP / AVIF yes (AVIF in Pro)yes (AVIF in Pro)yes (AVIF via cloud API)yesyesyes (via CDN)
AI alt text yes (Pro, your own API key, no credit cap)nonoyes, via a separate credit quota (100/month free, “Unlimited AI” tier $15.99/month)nono
AI image detection automatic via C2PA/XMP provenance data, otherwise manual classification–––––
Marker in all image sizes yes – machine-readable marker in every size incl. WebP/AVIF–––––
Visible label yes, customizable design (Pro)–––––
Platforms WordPress–––––
Cost Free · Pro €69/year or €9/monthFree · Pro 10k $5/month (10,000 images) · Pro 120k $50/year (120,000 images/year)local free · cloud API from $80/yearFree 100 credits/month · Unlimited $9.99/month or $99.90/year · one-time packs from $19.99Free 20 MB/month · Growth $5.99/month · Infinite $11.99/monthFree 2,000 visits/month (+20,000 with badge) · Personal $10.62/month (10 GB) · Business $34.22/month (50 GB)

Last verified: September 2026. The current vendor pages are authoritative.

The local options

  • IMG Performer – local, no account, plus EU AI Act Art. 50 labelling and optional AI alt text through your own key.
  • Converter for Media – local, no account, pure format conversion without alt text or AI labelling.
  • EWWW – local basic optimization without an account; better compression and AVIF use the cloud API.

When a cloud solution still fits

Anyone who wants to process a very large library in one go or get a CDN from one source, and is fine with the processing arrangement, will find solid tools in ShortPixel, Imagify or Optimole. For data protection as a priority and the EU AI Act labelling in one step, local processing is the better path.

Disclaimer

Note: Information on features and prices – including those of IMG Performer – reflects our knowledge at the time of publication and may change. We accept no liability for its accuracy. The current product and pricing pages of the respective providers are authoritative; information on IMG Performer is available at img-performer.enfants.de. The guidance on the labelling obligation under Article 50 of the EU AI Act is not legal advice – original text: eur-lex.europa.eu/eli/reg/2024/1689/oj.

Frequently asked questions

Is ShortPixel GDPR-compliant?

ShortPixel offers a DPA and a sub-processor list. The images are still transferred to the cloud for processing; the server location is not clearly communicated.

Do I need a DPA with local processing?

Not for image optimization – no images are transferred to third parties. Only IMG Performer's optional AI alt-text feature needs an agreement with your chosen AI provider.

Is local processing slower?

Conversion runs in the background and does not affect page delivery. The one-time batch run for a large existing library takes longer than through a cloud.