Legal
Privacy notice
This notice covers the Dronedesk DJI Log Viewer at logviewer.dronedesk.io. The Dronedesk platform at dronedesk.io has its own separate privacy notice.
The short version. Your flight log is decoded and thrown away. We do not keep it, and we do not link it to you. Your parsed flights live in your own browser. If you verify an email address to raise your usage allowance, that address is kept separately from any flight data.
Who we are
The DJI Log Viewer is operated by Grey Rock Innovations Ltd t/a Dronedesk, registered in England & Wales under company number 11621288, registered office Orchard House, Exeter EX5 1BR. For the purposes of UK GDPR and EU GDPR we are the data controller for this service.
Privacy questions: privacy@dronedesk.com.
Your flight logs
When you upload a DJIFlightRecord file:
- It is transmitted to our server over HTTPS.
- If it is encrypted, a decryption keychain is requested from DJI's developer API. That request identifies the log, not you.
- It is decoded and parsed in memory.
- The parsed result is returned to your browser.
- The uploaded file is not written to disk and is not retained. It exists only for the duration of the request.
The parsed flight is then stored in your browser's local storage on the device you are using. We cannot read it. It stays there until you delete the flight, use the Clear all control, or clear your browser data.
A DJI flight log contains precise location data, which is personal data if it can be connected to a person. We do not connect it. Uploaded logs are not associated with your email address, your account or your session beyond the lifetime of the request that decoded them.
Written flight analysis
The viewer generates a short written analysis of each flight. To produce it, a summary of the flight is sent to Anthropic's Claude API, processed, and the resulting text returned to your browser.
What is sent is a summary rather than the log file itself. It contains the flight's numeric readings (duration, distance, height, speed, battery voltage, capacity, temperature, cycle count, satellite counts) and the list of warnings and events the aircraft raised.
Anthropic processes this under its Commercial Terms, not its consumer terms. That means:
- The content is not used to train Anthropic's models. Anthropic's commercial terms state that retained data is never used for model training without express permission, and we have not given it.
- It is not retained by default. Anthropic does not retain prompts and outputs sent to the Claude API as a matter of course, beyond what is technically necessary to return the response.
- One exception applies. If a request is flagged by Anthropic's automated trust and safety systems, or where Anthropic is required to retain data by law, it may be held for up to two years. Flight telemetry is not the kind of content those systems are looking for, but the exception is theirs and we cannot waive it on your behalf.
Anthropic is based in the United States. Transfers are covered by the data processing terms incorporated into our agreement with them, which rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses. Their current policy is published at anthropic.com/legal/privacy.
We do not retain the summary, the response, or any part of the analysis once it has been returned to you.
Your email address
Anonymous use has a limited allowance. Verifying an email address raises it. If you choose to verify:
- We store your email address and the allowance associated with it.
- We check the address against a disposable-address detection service before sending anything.
- We send a verification code to it.
- Your email address is not linked to your flight logs, because we do not keep your flight logs.
If you tick the marketing consent box, we may also send you occasional emails about Dronedesk. You can withdraw that at any time using the unsubscribe link in any message, or by emailing us. Withdrawing marketing consent does not affect your usage allowance.
Technical and usage data
To keep the service running and prevent abuse we process:
| Data | Why | Kept for |
|---|---|---|
| IP address | Rate limiting, allowance enforcement, abuse prevention, server security logs | Not stored in raw form. Rate limiting uses a salted one-way hash, deleted after 2 days. Raw IP addresses appear only in standard server logs, retained for up to 30 days. |
| Request metadata (timestamp, endpoint, response status, user agent) | Operating and debugging the service | Held only in standard server logs, retained for up to 30 days. |
| Usage counters | Enforcing the fair-use allowance | 2 days |
| Anti-bot challenge result | Blocking automated abuse of the upload endpoint | Duration of the session |
We do not use advertising cookies, and we do not run third party analytics that track you across other sites.
Lawful basis
- Performing the service you asked for (contract, or legitimate interests where no contract exists): decoding the log you uploaded and returning the result.
- Legitimate interests: rate limiting, abuse prevention, security logging and keeping the service available. We consider this proportionate because the data involved is minimal and is not used to build a profile of you.
- Consent: marketing emails, where you have ticked the box. Withdrawable at any time.
Who else is involved
We use the following service providers. Each processes only what it needs to do its job.
| Provider | What it does | What it sees |
|---|---|---|
| DJI | Issues decryption keychains for encrypted flight records | Log identifiers required to issue a keychain |
| Cloudflare | Anti-bot challenge on the upload and email forms | Your IP address, challenge result |
| MapTiler | Map and satellite tiles | Tile requests, for the map area you are viewing |
| Resend | Sends verification code | Your email address |
| Hetzner (Gotenberg) | Renders the PDF flight report | PDF report content |
| Anthropic (Claude API) | Generates the written flight analysis | A summary of the flight's figures and warnings |
| Krystal Hosting | Hosts the application | All traffic to the service |
| OpenPanel | Website analytics | Page views, referrer, IP address (not stored in raw form) |
International transfers
Some of these providers are outside the UK. Where that is the case, transfers are made under the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with the provider's own safeguards. You can find out more at our Trust Centre
Your rights
Under UK and EU data protection law you have the right to access, correct, erase or restrict processing of your personal data, to object to processing based on legitimate interests, to data portability, and to withdraw consent where consent is the basis.
In practice, for this service:
- Flight logs. Nothing to erase on our side. Use Clear all in the viewer to remove them from your browser.
- Email address. Email privacy@dronedesk.com and we will delete it and the allowance record attached to it.
- Marketing. Use the unsubscribe link in any message.
If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA.
Children
This service is intended for drone operators and is not directed at children. We do not knowingly collect personal data from anyone under 16.
Security
All traffic is served over HTTPS. Uploaded logs are held only in memory. Access to the systems that hold email addresses is restricted and authenticated. No system is perfectly secure, but we keep the amount of data worth attacking deliberately small.
Changes to this notice
We will update this page when the service changes. The date below reflects the most recent revision.