DroneDealer is a marketplace for buying and selling FPV drone gear, at
dronedealer.net and in the DroneDealer app.
DroneDealer is operated by Michael Coen, an individual based in
Ireland, trading as DroneDealer ("we", "us"). Michael is the controller of your
personal data, which means he decides how and why it is used and is responsible
for it. If DroneDealer becomes a company, we will update this policy and tell you.
Account: username, email address, profile photo, country,
bio, and the flying styles you choose.
Waitlist: your email address, and how you found us — for
example, which ad or link brought you to the site.
Pre-launch listings: the email address and listing details
you submit before launch, including photos.
Listings: titles, descriptions, photos, prices, condition,
categories, parcel size, and any lithium-battery details.
Orders: what you bought or sold, prices, fees, offers,
order status, and shipping and tracking details.
Payments: handled by Stripe. We never see or store your full
card number. We can see your card's brand, last four digits and expiry
date, which we show you on the Payments screen.
Sellers: Stripe collects bank details and identity
verification directly. We store only the Stripe account identifier and
whether verification is complete.
Addresses: shipping addresses and phone numbers.
Messages: your conversations and offers with other users.
Reports and disputes: reports you make or that are made about
you, and any evidence photos attached to them.
How you use DroneDealer: listings you view (recorded against
your account, to show you "recently viewed" and to recommend listings),
saved searches, favourites, and when you were last active.
Creator codes: if you are a creator, your code, referrals and
commission; if you use a code, which one.
Devices: device type, operating system and app version, push
notification tokens, and — in the iOS app, if you agree — crash reports.
Email preferences: if you unsubscribe, a one-way scrambled
(hashed) version of your email and what you opted out of, so we keep honouring it.
3. How we use it, and why we are allowed to
The law requires every use of your data to have a legal basis. Ours are
below, each with the basis it relies on.
Running your account and the marketplace
Creating your account; showing and managing listings; messages and offers;
taking payment through Stripe; paying sellers through Stripe Connect; postage
quotes, shipping labels and tracking; order emails and in-app notifications.
Basis: contract — we cannot provide the service you
signed up for without it.
Keeping records the law requires
Records of orders and payments, for tax and accounting.
Basis: legal obligation.
Keeping DroneDealer safe
Preventing fraud and abuse, blocking automated attacks, handling reports and
disputes, and enforcing our Terms.
Basis: legitimate interests — a marketplace where
strangers trade money and goods has to be able to protect them.
Improving DroneDealer and recommending listings
"Recently viewed", "Suggested for you" (based on the flying styles you chose
and what is popular), and understanding from our own records which features
are used.
Basis: legitimate interests. You can object at any
time (see section 6).
Analytics and advertising measurement
On the website: Google Analytics, the Meta Pixel and the TikTok Pixel. In the
iOS app: Firebase Analytics and crash reports. See section 8.
Basis: consent — none of these run unless you agree,
and saying no changes nothing else.
Emails
Order and account emails (receipts, shipping, refunds, password
resets) — basis: contract. These cannot be turned off while you have an
account or an order in progress.
Activity emails (new messages, offers, saved-search matches) —
basis: legitimate interests. Every one has a link to turn them off.
Waitlist emails — basis: consent, given when you joined.
If you joined the waitlist before 24 September 2026, we will
only email you to announce the launch — that is what you were told when you
signed up, and we keep to it.
If you joined on or after that date, we will email you launch news and
the occasional update.
Every waitlist email has an unsubscribe link.
4. Who we share it with
We do not sell your personal information.
Other users
Signed-in users can see your profile (username, photo, country, bio, ratings)
and your listings. People you chat with can see your messages and,
approximately, when you were last active (you can turn that off in Privacy
Settings). When an order is placed, the buyer and seller see what they need to
complete it, including the delivery address.
Service providers
Each receives only what it needs for its job, and works for us rather than for
itself:
Google (Firebase and Google Cloud) — hosting, database, file
storage, sign-in, push notifications and crash reports; reCAPTCHA, which
helps tell real visitors from automated attacks on the website.
Apple — DeviceCheck, the same protection in the iOS app, and
delivery of push notifications.
Stripe — payments, seller payouts and identity verification.
EasyPost, Shippo and Sendcloud — postage quotes, shipping labels
and tracking. They receive the sender's and recipient's addresses and parcel
details.
Shipping carriers (for example USPS, UPS and FedEx) — the
delivery address and contact details printed on the label.
Algolia — search. It receives listing details and the seller's
user ID so results can be shown and filtered.
Google Maps Platform — finding carrier drop-off points near a
seller's address.
Mailjet — sends our emails.
Zoho — hosts our inbox, so it receives any email you send us.
Google Analytics, Meta and TikTok — only if you accept them on
the website (section 8).
Other cases
If the law requires it, or to protect someone's rights or safety. And if
DroneDealer is sold or merged, your data may pass to the new owner, who must
keep to this policy.
5. Keeping it secure
All connections are encrypted (HTTPS), and data is encrypted where it is stored.
Card payments are handled by Stripe, which is PCI-certified; card numbers never
reach us.
Payment account identifiers and push notification tokens are stored where only
you can read them — not other users, and not anyone who is not signed in.
Profiles are visible only to signed-in users, not to the public web.
No system is perfectly secure, and we cannot promise that nothing will ever go
wrong. If a breach puts your data at risk, we will tell you and the Data
Protection Commission as the law requires.
6. Your rights
You can ask us to:
Access — give you a copy of your data.
Correct — fix anything inaccurate.
Delete — delete your data (you can also delete your account
yourself in Settings).
Move — give you your data in a portable format.
Object — stop using it for our legitimate interests,
including recommendations.
Restrict — pause our use of it while a concern is looked into.
Withdraw consent — at any time, for anything that relies on it.
This does not affect what was done before.
Email Michael@dronedealer.net. We
respond without undue delay and within one month. If a request is complex we may
need up to two more months, and we will tell you why within the first month.
You also have the right to complain to the Data Protection
Commission in Ireland (dataprotection.ie),
or to the data protection authority where you live.
7. How long we keep it
Your account: while it is open.
When you delete your account: your profile, listings,
favourites, saved searches, addresses, notifications and viewing history are
deleted straight away, and any backup copies expire within 30 days. Photos you
uploaded are not yet removed automatically — email us and we will delete them.
Orders and payments: six years, as Irish tax law requires.
Messages: messages you sent stay visible to the person you sent
them to after you delete your account, because a conversation can be the
evidence in a dispute about an order.
Waitlist: until you ask us to delete it. We will review and
remove waitlist entries that never became accounts within 12 months of launch.
Unsubscribes: kept in hashed form for as long as we send email,
so we can keep honouring them.
Analytics: held by Google, Meta and TikTok under each
provider's retention settings, and only if you agreed to it.
8. Cookies and tracking
On the website — what always runs
Keeping you signed in.
Remembering choices you make, such as dark mode and your cookie choice.
Google reCAPTCHA, which protects sign-in and forms from automated attacks.
On the website — only if you accept
Google Analytics (Google) — how people arrive at the site and
which parts they use.
Meta Pixel (Meta) — advertising measurement: whether our
Facebook and Instagram ads lead to signups and purchases.
TikTok Pixel (TikTok) — the same, for TikTok ads.
None of these load until you choose, and choosing "No thanks" leaves the site
working exactly the same. If your browser sends a Global Privacy
Control signal, we treat that as your answer and do not ask.
This takes you to the home page and asks again. Clearing your browser's data for
dronedealer.net does the same.
In the iOS app
The app does not run the Meta or TikTok pixels. It asks, the first time you open
it, whether to share usage analytics and crash reports through Firebase. Nothing
is sent until you agree, and you can change your mind in Settings.
9. Children
DroneDealer is for adults — you must be 18 or over to use it. We do not knowingly
collect data from anyone younger. If we learn an account belongs to someone under
18, we will delete it. If you think a child has given us their data, email us.
10. Data outside Ireland and the EU
DroneDealer is run from Ireland, and several of our providers — including
Google, Stripe, Algolia, Meta and TikTok — process data in the United States or
elsewhere outside the European Economic Area. When data leaves the EEA, we rely
on the EU–US Data Privacy Framework for providers certified under
it, and on the European Commission's Standard Contractual Clauses
otherwise. Email us for details of the safeguard that applies to a particular
provider.
11. For users in the United States
California: we do not sell personal information. The Meta and
TikTok pixels, which could count as "sharing" for cross-context advertising under
California law, only run if you accept them, and a Global Privacy Control signal
is honoured as an opt-out.
Do Not Track: there is no agreed standard for the older Do Not
Track browser setting, so we do not act on it separately. Nothing that tracks you
across other sites runs without your consent in any case, and Global Privacy
Control is honoured.
12. Changes to this policy
When we change this policy we will update the date at the top, and email you if
the change is significant. We will never treat continuing to use DroneDealer as
agreement to a new optional use of your data — if something needs your consent,
we will ask for it.