Hmm... I don't use imgix, but what if a site using it wants to give the user the option to correct the crop? Since even a good algorithm won't do the right thing 100% of the time, it would seem sensible to give the user one of those 'zoom to crop' widgets with the starting position detected by the algorithm, but the described services sounds like it only gives you a static cropped image as output - it neither provides a widget itself nor supplies the parameters required to make one. (Or maybe it does and it's just somewhere else in the documentation?)
There are a number of different ways that crops can be made including custom rectangle cropping via pixel or percentage values, provided as url string parameters. The face zoom crop is just an additional feature to save some steps for these kinds of scenarios. Ideally this feature can be built into an application providing a user with a suggested face crop, and then allow a to use the alternate custom crop that access a different set of parameters via imgix. imgix is an on demand dynamic api for these operations.
One nitpick, though: in the live demo of the circular cropped face, it appears that the face is slightly off center, whereas in the first promo image of the article [1] it appears more zoomed out and perfectly centered. I tweaked the url parameters a bit to try to mimic the promo [2], but the weighting of the image feels a little off -- towards the top right. If the auto face detection doesn't produce perceptually centered images consistently, that is an important caveat, and the promo should reflect that.
I am a little bit unsure about this service. Although i find it technically highly appealing, the resulting privacy concerns are not to be ignored (personal opinion, tell me otherwise).
Can somebody clarify how you validate the claimed 'Article 29 of Directive 95/46/EC'-compliance? It seems to me that this service somehow relies heavily on the well-behaviour of the clients.
Our service is only for use with images provided by our customers, and our terms of use specifically require them to have the associated rights for the images they use with us.
From a privacy standpoint, I don't see a practical difference between a website serving a user's profile photo directly from their S3 bucket vs. engaging imgix to serve it (in a more optimal fashion).
We do take security and privacy seriously. We do not sell or in any way utilize our customer's data for any purpose besides operating the service or reporting analytics metrics back to the customer. We do maintain caches of fetched and rendered images, but this is all done in a secure fashion.
Any online service has the potential for a data breach or unintended behavior, and we're not immune to bugs or mistakes. So far, our track record is impeccable, and we'll continue to take the appropriate steps to keep it that way.
The face information data is generated when the request is made, and none of the information generated is able to identify a person. It merely generates the coordinates of faces within the image.
Article 29 is geared more toward _facial recognition_, whereas what imgix does is mere _face detection_.