Dojo
Dojo is a mature open-source JavaScript toolkit providing a comprehensive set of UI widgets, data utilities, and application framework tools. It is a developer tool, not a data processor. GDPR obligations depend entirely on the application built with Dojo and where it is hosted. The toolkit itself does not set tracking cookies or transfer data to third parties.
What does Dojo do?
What is Dojo?
Dojo is a comprehensive open-source JavaScript toolkit that provides a modular collection of UI widgets, data binding utilities, build tools, and application framework components. It was one of the most influential JavaScript frameworks of the early web era and continues to be maintained and used in enterprise applications. Dojo is a developer tool and does not itself process, collect, or transfer personal data.
How does GDPR apply to Dojo?
GDPR obligations arise from the application built with Dojo and the personal data it processes, not from the framework code. The organisation deploying the Dojo-based application is the data controller. Cookie consent requirements apply to any cookies set by the application, not by Dojo itself. Third-party services integrated with the Dojo application (analytics, CDN-hosted scripts, API backends) each have their own GDPR compliance requirements.
CDN loading considerations
If Dojo is loaded from a public CDN (such as Google CDN or jsDelivr), the CDN provider may log visitor IP addresses. To avoid this, self-host Dojo files on your own server. Self-hosting is recommended for production applications where GDPR compliance is required, as it eliminates CDN-level data processing and the associated transfer risks.
Data stored via Dojo stores
Dojo's data store modules may cache personal data on the client side in browser memory or localStorage. If Dojo stores contain personal data, that data must be managed according to GDPR principles: cleared when consent is withdrawn, not retained longer than necessary, and secured appropriately.
Practical compliance steps
Self-host Dojo rather than loading from public CDNs. Implement cookie consent management in the application. Audit localStorage usage for personal data. Sign DPAs with backend APIs and third-party services. Document data flows in your RoPA.
Dojo and the GDPR
- Legal basis
- Dojo is a toolkit, not a data processor. GDPR obligations arise from the application built with Dojo.
- Risk level
- low
- Applicable regulations
- GDPR compliance is the responsibility of the application developer
Impact assessment (DPIA)
A DPIA is not required for Dojo itself. It may be required for applications using Dojo that process personal data at large scale or perform automated decision-making.
Sample text for your banner
This website is built using the Dojo JavaScript toolkit. Cookies and data collection on this site are described in our privacy policy and cookie notice.
What Dojo sets and contacts
- Tracking method
- Open-source JavaScript toolkit, no client-side tracking by default
- Server location
- Self-hosted (deployer's infrastructure)
- Cookieless mode available
- Yes
Cookies set (1)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| dojo_session | session | Session | Strictly necessary session cookie used by Dojo-based application authentication systems |
Third-party domains contacted (2)
dojotoolkit.orgajax.googleapis.com
Frequently asked questions about Dojo
Can't find your question? Write to us, we answer fast.
Is Dojo itself subject to GDPR?
No. Dojo is an open-source JavaScript toolkit. GDPR applies to the application built with Dojo and the data it processes, not to the toolkit itself.
Does loading Dojo from a CDN create GDPR issues?
Potentially yes. Public CDNs log visitor IP addresses on their servers, which may be located outside the EU. To avoid this, self-host Dojo files on your own EU-based server. This eliminates CDN-level data processing and transfer risks.
What cookies does Dojo set?
Dojo itself does not set cookies by default. Any cookies in a Dojo-based application are set by the application developer's code or by third-party services integrated with the application.
Does Dojo transfer data outside the EU?
Dojo itself does not transfer data. Transfer obligations depend on the CDN used to load Dojo, the backend services the application integrates, and where the application is hosted.
Do I need a DPIA for my Dojo application?
Not for Dojo itself. DPIAs may be required for specific application features that process personal data at large scale or perform automated decision-making.
How do I make my Dojo application GDPR compliant?
Self-host Dojo scripts. Implement a cookie consent management system. Audit any localStorage or IndexedDB usage for personal data. Sign DPAs with all backend APIs and third-party integrations. Build data subject rights handlers into the application.
Does Dojo localStorage cache contain personal data?
It may, depending on the application. Dojo's data stores can cache query results in browser memory or localStorage. If these caches contain personal data, the application must manage that data appropriately: clear caches on logout, on consent withdrawal, and after defined retention periods.
Does Dojo need to be in my privacy policy?
No, unless your organisation uses it in a way that involves personal data processing specific to the toolkit. The data processing within your Dojo-based application needs to be described, along with any third-party services integrated.
Frappe
Frappe is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Frappe supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Frappe ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Axios
Axios is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Axios integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Axios helps organizations maintain robust websites that meet user expectations and technical requirements.
jQuery Sparklines
jQuery Sparklines is a JavaScript library that simplifies web development by providing utility functions, DOM manipulation tools, and cross-browser compatibility. It offers a clean, chainable API that reduces code complexity and development time. jQuery Sparklines supports AJAX requests, event handling, and animation effects. With extensive documentation and a vast plugin ecosystem, jQuery Sparklines remains a reliable choice for developers building interactive, performant web experiences.
Socket.IO
Socket.io is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Socket.io integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Socket.io helps organizations maintain robust websites that meet user expectations and technical requirements.
Storefront UI
Storefront UI is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Storefront UI supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Storefront UI ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
AngularDart
AngularDart is a JavaScript framework designed for building fast, interactive, and scalable web applications. It provides component-based architecture, reactive data binding, and efficient DOM rendering. AngularDart supports server-side rendering, static site generation, and progressive web apps. With a rich ecosystem of plugins and developer tools, AngularDart accelerates frontend development and delivers exceptional user experiences with optimized performance and SEO-friendly output.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.