Privacy

This page describes, in plain language, what Whiteboard actually does with data. It isn't a substitute for legal advice, if you need a privacy policy that satisfies a specific regulation for your situation, have it reviewed by a lawyer.

If you don't create an account

Nothing you draw leaves your browser. Boards are saved to your browser's local storage only. We never see them, and there's nothing to delete on our end because nothing was ever sent to us.

If you create an account

We store, in our database:

• Your email address and the name you provide.
• A bcrypt hash of your password, never the password itself.
• Any board you explicitly choose to save to your account.

A signed session cookie keeps you logged in; it can't be read or modified by page scripts. If you request a password reset, we email a one-time link, the underlying token is stored only as a hash, expires after an hour, and is deleted once used.

What we don't do

We don't sell data, and we don't share it with third parties beyond the services required to run the app itself (the email provider that delivers password-reset links, and, if enabled on this deployment, Google Analytics for aggregate usage statistics like page views and browser type).

Deleting your data

There's no self-service delete button yet. To request that your account and everything tied to it be removed, email support@qeezox.com.