I am interested in adding Image Optimization to Turbo so you’ll never have to ask yourself, “Did I optimize those images?”, “What is image optimization?”, “What’s the best optimization for these types of images?”, etc. The goal of Turbo is to give you the best website performance while maintaining control and privacy all without having to think about it. As with all solutions, there are many approaches to this. I’d love to hear your thoughts
Do image optimization on my server. Pros: completely private with respect to GDPR, etc. Images are served from your Domain. Cons: less effective optimization
Use an image Optimization API (built by yours truly). Pros: More effective image Optimization. Images hosted from your Domain. Cons: Requires the images to be optimized by me and downloaded to your server.
Automatic CDN. Pro: we upload your image to our CDN and globally distribute it for you. This ensures a high cache hit ratio fast response times. We optimize images in the cloud for you. Cons: images are not hosted on your domain. All of this is included in your subscription.
In either Option 1 or Option 2, images will always be hosted from your domain. GDPR does not apply here.
In Option 1, the image is optimized in your web hosting environment directly. This doesn’t work great in my preliminary testing (images were optimized, but the amount of savings could be better).
In Option 2, the image would be sent, in the background (with ZERO user information) to my API service where I 1) optimize the image and 2) return it back to your hosting environment. The user requests the image from your web hosting server as normal.
From the user’s perspective and GDPR, these 2 options are exactly the same.
Any solution where the visitor’s IP is shared with an external supplier, will require consent from that visitor according to GDPR. Keeping that in mind, the site’s owner will have to place all the optimised images behind a consent construction.
In theory you could list Chillidog as a data processor in your privacy policy, which would remove the requirement of consent from the visitor, but I don’t think image optimisation has ever been tested in court in the EU. Google Fonts was not allowed to be listed as a data processor in a similar case, which lead to quite a legal pothole in Germany.