CDN

Imgix

imgix is a US-based image transformation CDN that resizes, crops, formats, and optimises images on the fly. Developers point their image sources (S3, GCS, web folder) at imgix and serve images via URL parameters that drive transformations. imgix delivers via Fastly with global PoPs including the EU. It does not set cookies in the visitor browser and does not run any client-side tracker by default.

Block Imgix until consent Scan my site

Overview

What does Imgix do?

What imgix is

imgix is a US image transformation CDN founded in 2012 by Zebrafish Labs, Inc. (San Francisco). Developers attach an imgix source (S3 bucket, Google Cloud Storage, web folder) and serve images via URLs that include query parameters describing the desired transformation (resize, crop, format, quality, blur, color adjustments). imgix delivers via the Fastly CDN with PoPs across the EU, the US, Asia, and Oceania.

What data imgix processes

For each image request: visitor IP, user agent, referrer, URL with transformation parameters, response metadata. imgix does not set cookies in the visitor browser and does not run any client-side tracker by default. The image content itself is processed during transformation; for private images, signed URLs and Web Folder sources with restricted access can be used.

GDPR and ePrivacy implications

IP addresses are personal data and are processed under legitimate interest (Art. 6(1)(f)) as part of the image delivery infrastructure. The ePrivacy consent requirement does not apply because imgix does not store or read information on the device. The image content can be personal data if the publisher serves user-uploaded photos.

International data transfers

Visitors are served from the nearest Fastly PoP (EU PoPs for EU visitors), so the delivery path stays in the EU for most EU visitors. However, the rendering infrastructure, dashboard, billing, and support are operated from the United States by Zebrafish Labs. Transfers rely on Standard Contractual Clauses under Art. 46(2)(c) GDPR and on the EU-US Data Privacy Framework certification.

Practical compliance steps

Sign the imgix DPA, document the SCCs and the DPF in your privacy notice, use signed URLs for private images, document imgix in the RoPA as a processor, and mention the EU edge delivery alongside the US rendering origin in your transparency communication.

Compliance

Imgix and the GDPR

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for image delivery as a necessary technical component of website rendering
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive, CCPA

Impact assessment (DPIA)

imgix processes the visitor IP and request metadata to deliver the transformed image. Key DPIA considerations: (1) IP addresses are personal data, processed under legitimate interest; (2) the operator is US-based (Zebrafish Labs), triggering a transfer assessment even though delivery uses EU PoPs; (3) the image content itself can be personal data when the publisher serves user-uploaded photos; (4) signed URLs should be used for private images; (5) imgix does not introduce any tracking pixel or analytics on the visitor side.

Sample text for your banner

Our website uses imgix, a US-based image transformation CDN, to deliver our images. imgix processes your IP address and request metadata to serve the correct image and applies on-the-fly transformations (resize, format, optimisation). Delivery uses Fastly EU PoPs; transfers to US infrastructure rely on Standard Contractual Clauses and the EU-US Data Privacy Framework. imgix does not set cookies in your browser.

Cookies and trackers

What Imgix sets and contacts

Tracking method: Image transformation CDN: visitors request images from imgix.net (or a customer subdomain) with URL parameters that drive on-the-fly resize, crop, format conversion, and optimisation
Server location: United States (Zebrafish Labs, Inc. d/b/a imgix, headquartered in San Francisco) with a global Fastly edge network including EU PoPs
Cookieless mode available: Yes
Data transferred outside the EU: imgix is operated by a US company; the origin sources (S3, Google Cloud Storage, web folders) can be hosted anywhere. Edge delivery uses the Fastly CDN with worldwide PoPs including the EU. Transfers from EU visitors to US infrastructure (rendering origin, billing, dashboard) rely on Standard Contractual Clauses under Art. 46(2)(c) GDPR and on the EU-US Data Privacy Framework certification.

Cookies set (1)

Name	Type	Duration	Purpose
No cookies set by imgix	N/A	N/A	imgix is a server-side image transformation CDN and does not write cookies to the visitor browser. Any cookie received from an imgix URL is set by the customer origin application served behind imgix.

Third-party domains contacted (5)

imgix.com
www.imgix.com
imgix.net
*.imgix.net
dashboard.imgix.com

Questions

Frequently asked questions about Imgix

Can't find your question? Write to us, we answer fast.

Write to us

Does imgix set cookies?

No. imgix is a server-side image CDN and does not write cookies to the visitor browser. Any cookie received from an imgix URL is set by the customer origin application served behind imgix.

Does imgix require user consent?

No. The ePrivacy consent requirement does not apply because imgix does not store or read information on the device. Processing of the visitor IP for image delivery relies on legitimate interest under Art. 6(1)(f) GDPR.

What is the legal basis for using imgix?

Legitimate interest (Art. 6(1)(f) GDPR) for the image transformation and delivery as a necessary technical component of website rendering.

Does imgix transfer data to the United States?

Yes, for the rendering origin, dashboard, billing, and support; delivery itself uses the nearest Fastly PoP (EU PoPs for EU visitors). Transfers rely on Standard Contractual Clauses and the EU-US Data Privacy Framework certification.

Do I need a DPIA for imgix?

For ordinary product or marketing imagery, no. For platforms serving user-uploaded images (profile photos, ID documents, medical images), document a short DPIA covering signed URLs, access controls, and the US transfer mechanism.

How do I implement imgix compliantly?

Sign the imgix DPA, use signed URLs for private images, document imgix in your RoPA, mention imgix and the US/EU edge architecture in the privacy notice, and exclude truly sensitive imagery from any third-country processing flow.

What are the alternatives to imgix?

EU-friendly alternatives include Bunny Optimizer (Slovenia), Twicpics (France), Cloudinary EU (Frankfurt), Uploadcare (Estonia), ImageKit, Sirv (UK), Storyblok Image Service (Switzerland), and self-hosted options like Imgproxy or libvips behind a EU CDN.

How do I update the cookie policy for imgix?

imgix does not set cookies, so no cookie policy entry is needed. Mention imgix in the privacy notice under technical subprocessors, with the dual EU edge delivery / US rendering note, the SCCs and DPF references.

Speed Kit

Speed Kit is a web performance optimization platform that helps websites load faster and deliver better user experiences. It provides detailed performance metrics, Core Web Vitals monitoring, and actionable optimization recommendations. Speed Kit analyzes page speed, resource loading, and rendering to identify bottlenecks impacting user experience and search rankings. With automated optimization and real-time monitoring, Speed Kit helps businesses achieve faster load times and improved SEO.

Analytics

Acquia Cloud Platform CDN

Acquia Cloud Platform CDN is a content delivery network (CDN) that accelerates website performance by distributing content across a global network of edge servers. It reduces latency, improves page load times, and handles traffic spikes by serving cached content from the nearest location. Acquia Cloud Platform CDN supports static and dynamic content acceleration, DDoS protection, and SSL/TLS encryption. With real-time analytics and purge capabilities, Acquia Cloud Platform CDN ensures fast, reliable delivery.

CDN

THRON

THRON is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. THRON integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, THRON helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Amazon S3

Amazon S3 is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Amazon S3 supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Amazon S3 ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CDN

ArvanCloud

ArvanCloud is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ArvanCloud integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ArvanCloud helps organizations maintain robust websites that meet user expectations and technical requirements.

CDN

RackCache

RackCache is a web performance optimization tool that helps websites load faster by implementing caching, lazy loading, and resource optimization techniques. It automatically compresses and minifies CSS, JavaScript, and images. RackCache improves Core Web Vitals scores, enhances user experience, and boosts search engine rankings through intelligent optimization strategies. With easy implementation and real-time monitoring, RackCache delivers measurable speed improvements.

CDN

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site