> How the GDPR applies to sites built with the Dojo JavaScript toolkit: the library itself sets no cookies, so obligations depend on your application.
>
> Canonical: https://www.flowconsent.com/en/services/framework/dojo

Frameworks

# Dojo

Unclassified · [Official website](https://dojotoolkit.org)

Dojo is a mature open-source JavaScript toolkit providing a comprehensive set of UI widgets, data utilities, and application framework tools. It is a developer tool, not a data processor. GDPR obligations depend entirely on the application built with Dojo and where it is hosted. The toolkit itself does not set tracking cookies or transfer data to third parties.

[Block Dojo until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=framework) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Frameworks](https://www.flowconsent.com/en/services/framework)

- Consent

  Unclassified

- Prior consent

  Not required

- Documented cookies

  1

- Third-party domains

  2

- Servers

  Self-hosted (deployer's infrastructure)

Overview

## What does Dojo do?

## **What is Dojo?**

Dojo is a comprehensive open-source JavaScript toolkit that provides a modular collection of UI widgets, data binding utilities, build tools, and application framework components. It was one of the most influential JavaScript frameworks of the early web era and continues to be maintained and used in enterprise applications. Dojo is a developer tool and does not itself process, collect, or transfer personal data.

## **How does GDPR apply to Dojo?**

GDPR obligations arise from the application built with Dojo and the personal data it processes, not from the framework code. The organisation deploying the Dojo-based application is the data controller. Cookie consent requirements apply to any cookies set by the application, not by Dojo itself. Third-party services integrated with the Dojo application (analytics, CDN-hosted scripts, API backends) each have their own GDPR compliance requirements.

## **CDN loading considerations**

If Dojo is loaded from a public CDN (such as Google CDN or jsDelivr), the CDN provider may log visitor IP addresses. To avoid this, self-host Dojo files on your own server. Self-hosting is recommended for production applications where GDPR compliance is required, as it eliminates CDN-level data processing and the associated transfer risks.

## **Data stored via Dojo stores**

Dojo's data store modules may cache personal data on the client side in browser memory or localStorage. If Dojo stores contain personal data, that data must be managed according to GDPR principles: cleared when consent is withdrawn, not retained longer than necessary, and secured appropriately.

## **Practical compliance steps**

Self-host Dojo rather than loading from public CDNs. Implement cookie consent management in the application. Audit localStorage usage for personal data. Sign DPAs with backend APIs and third-party services. Document data flows in your RoPA.

Compliance

## Dojo and the GDPR

- Legal basis

  Dojo is a toolkit, not a data processor. GDPR obligations arise from the application built with Dojo.

- Risk level

  low

- Applicable regulations

  GDPR compliance is the responsibility of the application developer

### Impact assessment (DPIA)

A DPIA is not required for Dojo itself. It may be required for applications using Dojo that process personal data at large scale or perform automated decision-making.

### Sample text for your banner

> This website is built using the Dojo JavaScript toolkit. Cookies and data collection on this site are described in our privacy policy and cookie notice.

Cookies and trackers

## What Dojo sets and contacts

- Tracking method

  Open-source JavaScript toolkit, no client-side tracking by default

- Server location

  Self-hosted (deployer's infrastructure)

- Cookieless mode available

  Yes

### Cookies set (1)

| Name          | Type    | Duration | Purpose                                                                                 |
| ------------- | ------- | -------- | --------------------------------------------------------------------------------------- |
| dojo\_session | session | Session  | Strictly necessary session cookie used by Dojo-based application authentication systems |

### Third-party domains contacted (2)

- `dojotoolkit.org`
- `ajax.googleapis.com`

Questions

## Frequently asked questions about Dojo

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Is Dojo itself subject to GDPR?

No. Dojo is an open-source JavaScript toolkit. GDPR applies to the application built with Dojo and the data it processes, not to the toolkit itself.

### Does loading Dojo from a CDN create GDPR issues?

Potentially yes. Public CDNs log visitor IP addresses on their servers, which may be located outside the EU. To avoid this, self-host Dojo files on your own EU-based server. This eliminates CDN-level data processing and transfer risks.

### What cookies does Dojo set?

Dojo itself does not set cookies by default. Any cookies in a Dojo-based application are set by the application developer's code or by third-party services integrated with the application.

### Does Dojo transfer data outside the EU?

Dojo itself does not transfer data. Transfer obligations depend on the CDN used to load Dojo, the backend services the application integrates, and where the application is hosted.

### Do I need a DPIA for my Dojo application?

Not for Dojo itself. DPIAs may be required for specific application features that process personal data at large scale or perform automated decision-making.

### How do I make my Dojo application GDPR compliant?

Self-host Dojo scripts. Implement a cookie consent management system. Audit any localStorage or IndexedDB usage for personal data. Sign DPAs with all backend APIs and third-party integrations. Build data subject rights handlers into the application.

### Does Dojo localStorage cache contain personal data?

It may, depending on the application. Dojo's data stores can cache query results in browser memory or localStorage. If these caches contain personal data, the application must manage that data appropriately: clear caches on logout, on consent withdrawal, and after defined retention periods.

### Does Dojo need to be in my privacy policy?

No, unless your organisation uses it in a way that involves personal data processing specific to the toolkit. The data processing within your Dojo-based application needs to be described, along with any third-party services integrated.

Same category

## More services: Frameworks

[See the whole category](https://www.flowconsent.com/en/services/framework)

### [Frappe](https://www.flowconsent.com/en/services/framework/frappe)

[Frappe is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Frappe supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Frappe ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/frappe)

[Frameworks](https://www.flowconsent.com/en/services/framework/frappe)

·

### [Axios](https://www.flowconsent.com/en/services/framework/axios)

[Axios is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Axios integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Axios helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/axios)

[Frameworks](https://www.flowconsent.com/en/services/framework/axios)

·

### [jQuery Sparklines](https://www.flowconsent.com/en/services/framework/jquery-sparklines)

[jQuery Sparklines is a JavaScript library that simplifies web development by providing utility functions, DOM manipulation tools, and cross-browser compatibility. It offers a clean, chainable API that reduces code complexity and development time. jQuery Sparklines supports AJAX requests, event handling, and animation effects. With extensive documentation and a vast plugin ecosystem, jQuery Sparklines remains a reliable choice for developers building interactive, performant web experiences.](https://www.flowconsent.com/en/services/framework/jquery-sparklines)

[Frameworks](https://www.flowconsent.com/en/services/framework/jquery-sparklines)

·

### [Socket.IO](https://www.flowconsent.com/en/services/framework/socket-io)

[Socket.io is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Socket.io integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Socket.io helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/socket-io)

[Frameworks](https://www.flowconsent.com/en/services/framework/socket-io)

·

### [Storefront UI](https://www.flowconsent.com/en/services/framework/storefront-ui)

[Storefront UI is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Storefront UI supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Storefront UI ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/storefront-ui)

[Frameworks](https://www.flowconsent.com/en/services/framework/storefront-ui)

·

### [AngularDart](https://www.flowconsent.com/en/services/framework/angulardart)

[AngularDart is a JavaScript framework designed for building fast, interactive, and scalable web applications. It provides component-based architecture, reactive data binding, and efficient DOM rendering. AngularDart supports server-side rendering, static site generation, and progressive web apps. With a rich ecosystem of plugins and developer tools, AngularDart accelerates frontend development and delivers exceptional user experiences with optimized performance and SEO-friendly output.](https://www.flowconsent.com/en/services/framework/angulardart)

[Frameworks](https://www.flowconsent.com/en/services/framework/angulardart)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)