Privacy Policy

This Privacy Policy explains what information OnlineWhiteboard.org ("we," "us," "our," or "the Company") collects, how it is used, and the limits of our responsibility regarding data when you use our website and services ("Service"). By using the Service, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Service immediately.

1. No Personal Data Collection by Us

OnlineWhiteboard.org does not require account creation, login, or any registration. We do not intentionally collect, request, or store names, email addresses, passwords, phone numbers, payment information, or any other personally identifiable information ("PII"). You are functionally anonymous when using our core Service.

However, by accessing our website, certain technical data is automatically collected by standard web server and hosting infrastructure, as described in Section 3 below. This is standard practice across virtually all websites and is outside our ability to fully suppress. Your use of the Service constitutes your acknowledgment and acceptance of this.

2. Whiteboard Content — Processed Locally, Never Transmitted

All whiteboard drawing data, annotations, sticky notes, uploaded images, shapes, and any other board content is processed entirely within your own browser using client-side JavaScript. This content is:

• Never transmitted to our servers — it does not leave your device during normal use;
• Never stored in our databases — we have no database of user content;
• Never accessible to us — we have no technical ability to view, retrieve, or recover your board;
• Never shared with third parties — we cannot share what we do not have.

When you close your browser tab, all session data is permanently erased from memory. If you save a project file to your own device, that file remains entirely under your sole control and responsibility. We accept no responsibility for the security or loss of locally saved files.

Important limitation: Because we have no access to your content, we are technically unable to fulfill any content-specific data deletion or retrieval requests. Your content is already entirely private by design.

3. Automatically Collected Technical Data (Server Logs)

Like virtually all websites, our hosting infrastructure automatically records standard server access logs when your browser requests any page or resource. This may include:

• Your IP address (which may, in some jurisdictions, be considered personal data);
• Browser type, version, and operating system;
• Date and time of access;
• Pages or resources requested;
• HTTP referrer (the page you came from, if any);
• Response status codes and data transfer sizes.

This data is collected automatically by our hosting provider's infrastructure as a standard security and operational measure. It is used solely for purposes of diagnosing technical issues, detecting abuse, and maintaining service security. It is not linked to individual user identities, whiteboard sessions, or any content you create. This data is retained for a limited period as determined by our hosting provider's standard practices and is then deleted or anonymized.

We do not use this data for marketing, advertising profiling, or user tracking. We do not sell this data to any third party.

4. Cookies and Local Storage

We use only minimal, functionally necessary cookies or browser local storage required for the website to operate correctly (for example, preserving UI preferences within a session). We do not use:

• Third-party tracking cookies;
• Advertising or retargeting cookies;
• Behavioral analytics cookies that identify individual users across sessions;
• Any cookie that transmits whiteboard content or user-created data to external parties.

You can control cookies through your browser settings. Disabling cookies may affect certain UI functionality but will not prevent you from using the core whiteboard tool.

If we implement any form of analytics in the future, it will be aggregated and anonymized (e.g., total page visit counts) with no ability to identify individual users, and this Policy will be updated accordingly.

5. Third-Party Services and Infrastructure

We rely on third-party providers for website hosting, content delivery networks (CDNs), and related infrastructure. These providers may independently process technical data (such as IP addresses and request logs) as described in Section 3, in accordance with their own privacy policies. We have no control over the data practices of these third-party providers once data reaches their systems, and we disclaim all responsibility for their independent data collection and processing activities.

You are encouraged to review the privacy policies of any third-party service providers whose services may be in use. Links to such policies are not provided here as providers may change over time.

6. Advertising

Our website may display advertisements served by third-party advertising networks. These networks may independently set and read their own cookies to serve relevant or interest-based advertisements. We do not control the data practices of these networks. Their cookies and data collection are governed by their own privacy policies, not ours.

We are not responsible for any data collected by third-party ad networks. You may opt out of interest-based advertising through your browser's privacy settings, your device's ad settings, or opt-out tools provided by the relevant ad networks (such as the NAI opt-out tool or the DAA opt-out tool). Please note that opting out does not prevent ads from appearing — it only affects whether ads are personalized.

We do not pass any whiteboard content, drawings, or session data to any advertising network under any circumstances.

7. Collaborative Whiteboard Feature

Where the real-time collaborative whiteboard feature is available, rooms are temporary and expire automatically. Content within rooms is not stored on our servers. However, because collaboration requires real-time communication between browsers, certain technical connection data (such as IP addresses) may be transiently processed by our hosting infrastructure solely to facilitate the connection. This data is not retained beyond the active session. For full details, see the Collaborative Whiteboard Terms.

8. Children's Privacy

The Service is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from any user, including children. Because we collect no personal data from any user, children can use the whiteboard tool in educational contexts without concern about personal data being collected or stored by us.

Schools and educators may use the Service without concern about student data collection on our end — no student-created content or personal information is ever processed or stored by us. However, we do not accept any responsibility for how the Service is used within educational institutions, or for any content created by students.

If you believe a child under 13 has somehow provided personal information to us, please contact us and we will take steps to investigate and address the concern.

9. Data Security

Because we do not store personal data or whiteboard content on our servers, there is no user content at risk on our end. The primary security responsibility for your whiteboard work rests with you and your own device.

While we implement reasonable technical and organizational measures to protect our website infrastructure, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and disclaim all liability for any unauthorized access to or loss of technical log data that may occur despite our precautions.

You are solely responsible for the security of any project files you save locally to your device.

10. Data Retention

We retain server log data only for as long as reasonably necessary for security and abuse-prevention purposes, after which it is deleted or anonymized. We retain no whiteboard content, user-created data, or personal information. Because we hold no such data, there is nothing to delete upon request for core whiteboard usage.

11. Your Rights

Depending on your jurisdiction, you may have certain rights regarding personal data, including rights to access, rectify, delete, or object to processing of personal data. Because we do not collect or store personal data beyond standard server logs (which are not linked to identifiable individuals), most such rights are not practically applicable to our Service.

If you believe we hold personal data about you and wish to exercise any applicable rights, please contact us through our website. We will respond to legitimate requests in accordance with applicable law. However, we are not able to comply with requests that are technically impossible given our infrastructure (e.g., deletion of content we have never stored).

We make no representation that this Service complies with any specific data protection regulation (including but not limited to GDPR, CCPA, COPPA, or PIPEDA). If compliance with a specific regulation is required for your use case, you are responsible for making that determination independently.

12. International Users

The Service is operated from and primarily governed by the laws of the jurisdiction where the Company is based. If you access the Service from outside that jurisdiction, you do so on your own initiative and are responsible for compliance with your local laws. By using the Service, you consent to the processing of any technical data in the jurisdiction(s) where our hosting infrastructure operates, which may differ from your own.

13. Changes to This Policy

We reserve the right to update or replace this Privacy Policy at any time. Changes will be posted on this page with a revised "Last updated" date. Your continued use of the Service after any changes are posted constitutes your acceptance of the revised Policy. It is your responsibility to check this page periodically. We will not provide individual notice of changes.

14. Contact

If you have questions, concerns, or requests relating to this Privacy Policy, please contact us through our website. We will make reasonable efforts to respond to legitimate inquiries in a timely manner. However, we do not guarantee response times and accept no liability for delays.