Privacy Policy

Gesture Mode beta (added 1 October 2026)

This is available to signed-in users on desktop computers, but not phones or tablets. Camera permission is requested only when you activate it. Hand recognition runs on your device using a model and WASM files hosted by Jboard; video frames and hand landmarks are not stored or sent to our server. For collaboration, the server receives only temporary Gesture Mode status and viewport-move commands, never video. Two teleport points with centre/zoom are stored locally in your browser per account and board. Stop immediately turns off the camera. Google's MediaPipe Tasks library may send technical performance/utilization metrics to Google under its own notice; we do not include video frames in those messages.

Controller and contact

The controller for the Jboard service is the operator of justboard.org. For privacy requests, rights, or reports, contact support@justboard.org.

Data and purposes

For accounts we process email, name, protected credentials managed by Better Auth, sessions, and sign-in method to create and secure accounts (providing the service). With Google sign-in we receive the profile data authorized in the OAuth flow, ordinarily an identifier, email, name, and profile image; Google also processes sign-in under its own terms. Guests receive a technical cookie to retain ownership of groups they create. Anyone who knows a group code/link can open and collaborate on its boards.

We store board objects, text, uploaded images/PDFs, board settings, and account recent-history to provide collaboration and continuity (providing the service). WebSocket connections exchange edits and real-time presence, cursors, and viewed area; presence is not saved as board content.

For security and rate limits, the server temporarily processes IP addresses and request metadata; these may appear in infrastructure logs. We do not publish IPs. Only with consent, first-party statistics use pseudonymous visitor/session IDs, visit/usage events, device/browser category, and, for some guest visits, an HMAC of a coarse IP network segment. We do not store full IPs or board content in analytics. Authorized staff can view aggregate visit counts for boards they can access, never visitor emails, IPs, or tokens. This optional analytics processing is based on withdrawable consent.

Recipients and transfers

Railway hosts the application and persistent data in a US region (San Francisco). Google receives and supplies sign-in data only if you choose Google login. Cloudflare provides domain DNS, not the application database. People with a public group code or private group link can access its boards; the owner may restrict board creation and make them view-only for others. Authorized support staff may access groups, including private groups, for investigation and moderation. Infrastructure providers may process technical data under their agreements and terms. US transfers require applicable safeguards; request information about them at support@justboard.org.

Retention

Registered accounts and groups remain until deleted. Guest-created groups expire automatically after 24 hours unless claimed by an account; deleting a group removes its boards and uploads. Account deletion removes groups exclusively owned by that account. The technical guest cookie lasts up to 365 days. Raw analytics events are retained up to 90 days and aggregated daily counts up to 365 days; board visit totals without visitor identifiers remain as aggregate counts. Analytics cookies last up to 365 days (visitor) and 30 minutes (session). Authentication cookies follow Better Auth session lifetimes; local preferences remain until cleared in the browser. Infrastructure log and any backup retention are provider-controlled and not guaranteed by Jboard.

Support and reports

If you contact support, we process the email you provide, your message and any proof image to respond and investigate (legitimate interests in safety and troubleshooting). Only authorized support staff can access them. Where relevant, staff may associate the email with an account, owned groups/boards or recorded recent history, relevant owners, and session metadata actually available, such as browser and operating system. Abuse reports may require explicit inspection of relevant board content; bug reports may use available diagnostics. We do not infer unrecorded access or reliably identify Apple Pencil or other input solely from a browser agent. The secret ticket link shows only redacted request text, status and public updates. After closure, the public ticket and investigation data are deleted after 24 hours; only the ticket number and encrypted private proof remain for at most 60 days after closure. An account ban retains only an irreversible email identifier, reason, date and ticket number to block re-registration, subject to any applicable legal preservation duty.

Rights and children

You may request access, rectification, erasure, restriction, portability, and objection where applicable; you may withdraw analytics consent without affecting prior processing. Contact support@justboard.org. You may complain to the Italian data protection authority (Garante per la protezione dei dati personali). Italy permits online-service consent from age 14, while other EU countries may require 16. To use one rule without collecting country or birth date, Jboard permits independent registration only from age 16. We do not offer a verified parental-authorization flow. We ask only for an age-band confirmation; guest use is subject to the supervision rules in the Terms.