Privacy Policy

Effective 1 November 2026 · Back to P2Pboard

P2Pboard (p2pboard.net) is a free whiteboard for two people, shared directly between their devices. It is run by Okky Dj (“we”, “us”). This policy explains what information is involved when you use it. In short: there are no accounts, no cookies, no analytics and no ads, and your board is never stored on our servers.

1. What stays on your device

Your board (drawings, imported images and PDF pages) is saved in your browser's own storage so it survives a reload. It is not sent to us.
Your preferences (language, dark mode, touch drawing, whether to show the welcome note) are saved in your browser's local storage. They are not sent to us. Until you pick a language, it is chosen from your device's time zone and language settings, which are read in your browser only.

Clear Board deletes your board. Clearing this site's data in your browser settings deletes everything, preferences included.

2. When you connect with another person

Board content travels directly between the two devices, encrypted end-to-end (WebRTC / DTLS).
If a direct path isn't possible (for example on some mobile networks), the encrypted data is passed through a relay server run by Cloudflare. The relay cannot read it.
Voice calls are optional. A call starts only after both of you agree: one person asks, the other accepts. Only then is your microphone used, and only until either of you ends the call or disconnects. The audio travels the same way as the board (directly, or through the Cloudflare relay, encrypted end-to-end). Calls are not recorded, and no audio reaches us.
The person you connect with sees everything on the shared board and your cursor, and can save or export the board. Only connect with people you trust.
Because the connection is peer-to-peer, the other person's device learns your IP address, because the connection details the devices exchange contain it, and theirs is revealed to you. This is how direct connections work and is not something we can hide.

3. Information our connection service processes

To introduce the two devices, the app uses a small connection service at signal.p2pboard.net, hosted on Cloudflare. It processes:

Connection details: a technical description of each device's network connection, which includes IP addresses. It is stored under the short code for at most 20 minutes, can be read only once, and is then deleted.
Your IP address, used briefly in memory to limit how many requests one address can make (to prevent abuse). It is not saved.
Temporary relay credentials, issued per connection and valid for 24 hours. They are not linked to your identity.

If you use the manual (copy & paste) connection instead, the codes you exchange also contain this connection information, including IP addresses. You send them yourself, over a channel you choose.

4. Service providers

These companies process technical data (such as IP addresses and request logs) when you use P2Pboard, under their own privacy policies:

Cloudflare hosts the website, the connection service and the relay, and provides network-discovery (STUN) servers (privacy policy).
Google provides a backup network-discovery (STUN) server, used only if the relay credentials can't be fetched (privacy policy).

These providers operate worldwide, so this technical data may be processed outside your country.

5. Why we process it

We process IP addresses and connection details only to provide the connection you asked for and to keep the service secure. Where the law asks for a legal basis (for example the EU or UK GDPR), that basis is our legitimate interest in running a working, secure service, and providing the service you requested. We do not sell or share personal information, or use it for advertising or profiling.

6. Protecting the service

If someone abuses P2Pboard (see the Terms of Use), we may block IP addresses or network ranges from the connection service. If we do, we keep only the addresses involved and any related notes, for as long as the restriction is needed.

7. Copyright and other complaints

If you send us a complaint (for example a copyright notice), we use the details you give us, such as your name and email, only to handle it. We may share them with the person concerned, or with authorities, where this is needed to resolve the complaint or required by law.

8. Donations

We may in future offer a way to support P2Pboard through a third-party donation platform (such as Trakteer). If you donate, the platform handles your payment and personal data under its own privacy policy. We receive only what the platform shares with creators, such as your display name, message and amount, and use it only to acknowledge your support and to keep records the law requires. We never receive your full card or bank details.

9. Children

P2Pboard is designed for tutoring and may be used by students. It does not ask for names, emails or any other personal details. If local law requires it, students below the age of digital consent should use P2Pboard with the permission of a parent, guardian or teacher.

10. Your rights, wherever you are

P2Pboard is used internationally. Depending on where you live (for example under Indonesia's Personal Data Protection Law, the EU or UK GDPR, Brazil's LGPD, or the privacy laws of California and other US states), you may have the right to access, correct or delete personal data about you, to object to or restrict its processing, and to complain to your local data protection authority. Because we keep no accounts and delete connection details within 20 minutes, we usually hold nothing that can be linked to you. You can still contact us with any request or question, and we will answer within the time your law requires.

11. Changes

If this policy changes, the new version will be posted on this page with a new effective date.

12. Contact

Email: [email protected]