Privacy Policy

1. Who we are

DJI Index (“djiindex,” “we,” “us,” or “our”) operates the website at djiindex.com. DJI Index is independent and not affiliated with or endorsed by DJI. This policy describes how we process personal data when you visit the site. For questions or to exercise your rights, contact [email protected].

2. What we collect

Information you provide directly

We do not have accounts or registration. The only personal data you give us directly is what you choose to send by email (for example your address and the contents of your message).

Information collected automatically

• Market detection — to suggest a market and a currency, your browser first checks a market you chose before, then your device’s time zone and language settings. This happens in your browser; no request is sent anywhere to look up your country. A detected market code is saved in your browser’s local storage.
• Preferences — your market, light/dark theme, and catalog search history and filters are saved in your browser’s local storage on your device. They are not sent to us.
• Analytics events — Google Analytics 4 measures pages viewed and site interactions such as market changes and link clicks. See sections 5 and 6 below for how consent defaults affect this.
• Server logs — our hosting provider (Cloudflare) processes IP address, user agent and request metadata for security and abuse prevention, under Cloudflare’s own retention policy.

Catalog search text is removed from the page address before analytics runs, and is kept only in your browser’s session storage for that page load.

3. How we use your information

• To show products and prices for the market you choose
• To remember your market and theme preferences across visits
• To measure aggregate usage and improve the site
• To respond to messages you send us
• To detect, prevent and respond to abuse and security incidents
• To comply with legal obligations

We do not show advertising, do not use affiliate links and do not sell personal data.

4. Legal bases (EU/UK/EEA)

If you are in the EU, UK or EEA, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR) — for security, abuse prevention, maintaining the service, and cookieless aggregate measurement.
• Legal obligation (Art. 6(1)(c) GDPR) — to comply with applicable law.

Analytics and advertising storage is denied by default for visitors in these regions (see section 5), so we do not set analytics cookies for them.

5. Consent settings: what the site actually does

Before any other script runs, the site sets Google consent-mode defaults:

• EU, Iceland, Liechtenstein, Norway, UK and Switzerland — analytics and advertising storage are denied. Google Analytics still loads, but without storage it sends cookieless measurement pings and does not set its _ga cookies.
• Any browser that sends Global Privacy Control (GPC) — the same denial applies, wherever you are.
• Everywhere else — analytics and advertising storage are granted by default, so Google Analytics can set its cookies.
• Ad-data redaction is on, and URL passthrough is on. When storage is denied, URL passthrough lets Google pass measurement and ad-click identifiers in link addresses instead of cookies.
• Analytics measurement is switched off for browsers that identify as automated or report typical automated-browser screen sizes.

No consent banner is currently shown, and there is no on-site control to change these defaults. To opt out, turn on Global Privacy Control in your browser, or block or delete cookies in your browser settings. See the Cookie Policy for the full list of what is stored.

6. Third parties we share data with

Google Analytics 4

We use Google Analytics 4 to understand site usage. Google processes this data on our behalf and, for some processing, as a separate controller. For international transfers, Google relies on the EU-U.S. Data Privacy Framework and standard contractual clauses. See Google’s privacy policy.

Hosting and infrastructure

The site is hosted on Cloudflare, which processes traffic data for security, performance and abuse prevention. Sanity.io serves our content management data, and some product images may load from Sanity’s image service; press photos and illustrations are served from djiindex.com itself. Both act as processors on our behalf.

No advertising or affiliate partners

We have no advertising networks and no affiliate networks, so none receive data from this site. Links to DJI, retailers and other sites are ordinary links; those sites have their own privacy policies.

Other disclosures

We may disclose personal data when required by law, court order, or valid legal process, or to protect the rights, property or safety of DJI Index, our users, or the public.

7. International data transfers

Some of our service providers are located outside your country, including in the United States. Where required, transfers rely on the EU-U.S. Data Privacy Framework, the UK extension, the Swiss-U.S. DPF, or the European Commission’s Standard Contractual Clauses.

8. Retention

We keep personal data only as long as needed for the purposes described and to meet legal obligations. Analytics data is kept for the retention period set in our Google Analytics property. Email correspondence is kept for as long as needed to deal with the message.

9. Your rights

EU / UK / EEA (GDPR / UK GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion (the “right to be forgotten”)
• Restrict or object to processing
• Data portability
• Lodge a complaint with your local supervisory authority — find yours at edpb.europa.eu

California (CCPA / CPRA)

California residents have the right to know, delete and correct personal information, to opt out of its “sale” or “sharing”, to limit use of sensitive personal information, and not to be discriminated against for exercising these rights. We do not sell personal information and do not run advertising.

If your browser sends Global Privacy Control, the site denies analytics and advertising storage for your visit (see section 5). You can also email [email protected].

Other jurisdictions

We provide equivalent rights to residents of jurisdictions whose laws so require, including Brazil (LGPD), Canada (PIPEDA / Quebec Law 25), Australia (Privacy Act), and U.S. states with comprehensive privacy laws.

To exercise any right, email [email protected]. We will verify your request and respond within the time required by applicable law.

10. Children’s privacy

DJI Index is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact [email protected] and we will delete it.

11. Security

We use HTTPS across the site, security headers, and reputable infrastructure providers. No method of transmission over the internet or of electronic storage is completely secure, however, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, post a notice on the site.

13. Contact

Privacy questions or rights requests: [email protected].
General inquiries: see our contact page.