Effective [EFFECTIVE DATE] · Last updated [DATE]
Before publishing: this document was drafted from the application's actual behaviour, but it is not legal advice and has not been reviewed by a lawyer. Complete every [BRACKETED] field and have counsel review it — particularly if you serve users in the EU/UK (GDPR), California (CCPA/CPRA), or accept users under 18.
This policy explains what Flux ("we", "us") does with information when you use the Flux whiteboard application at [APP URL]. Flux is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS].
Flux stores the following locally in your browser. It is not transmitted to us, and clearing your browser storage for this site erases it permanently.
| What | Where | Why |
|---|---|---|
flux.guestId — a random identifier generated in your browser | localStorage | Distinguishes you from other participants on a shared board |
flux.guestName — the display name you choose | localStorage | Shown to other participants on the same board |
flux.room — the identifier of your most recent board | localStorage | Reopens your board when you return |
flux.mine, flux.foreign — which board codes you created or joined | localStorage | Offers "Save a copy" only on boards you did not create |
| Board content — cards, text, drawings, connectors, images you add | IndexedDB | So your work survives closing the tab |
The guest identifier is generated randomly on your device. It is not derived from your identity, hardware, or IP address, and we never see it unless you join a shared board.
Opening a board on your own transmits nothing. When you share a board link and another person joins, the following is exchanged between participants so the board can stay in sync:
Confirm before publishing: real-time collaboration requires a connection service to introduce participants to each other, and depending on the deployed configuration it may also relay board content. That service will necessarily observe IP addresses and board identifiers. You must name the provider you deploy with here — [SIGNALING / RELAY PROVIDER, ITS OPERATOR, AND ITS DATA RETENTION] — and state plainly whether board content passes through it. Do not publish this section unfinished.
Board links contain a random identifier and are not listed or indexed by us. But there is no sign-in and no permission list. Anyone who obtains a link can read and change that board, and can see the display names and cursors of everyone else on it. You can retire a link with Refresh link, which moves the board to a new address and empties the old one; people already holding the old link lose access, though they may have kept a copy. Do not put confidential, financial, health, or personal information about other people on a shared Flux board.
Flux loads its collaboration libraries from the public code CDN esm.sh. Requesting a file from any web server discloses your IP address, browser, and the page you came from to that server. We have no agreement with esm.sh and do not control its logging. [If you self-host these libraries before launch — recommended — delete this section.]
Static hosting for the site is provided by [HOSTING PROVIDER], which processes standard web-server request logs on our behalf.
Data on your device stays until you delete it, via your browser's "clear site data" control. Because we do not operate a board database, we cannot retrieve or restore a board for you, and we cannot delete a copy that another participant holds on their own device.
Depending on where you live you may have rights to access, correct, export, or erase personal information, and to object to or restrict its processing. Because Flux keeps your data on your own device, you can exercise most of these directly by clearing site data or editing your display name. For anything else, contact us at admin@horjaa.com.
[If you have EU/UK users, name your legal basis for processing, your controller identity, whether a representative under GDPR Art. 27 is required, and your supervisory-authority complaint route.]
Flux is not directed to children under [AGE], and we do not knowingly collect information from them.
Board links are unguessable in practice, and traffic to the site is served over HTTPS. We cannot guarantee the security of information you choose to place on a board you have shared, because control of that board passes to everyone holding its link.
If we change this policy we will update the date above. Material changes will be noted in the app.
admin@horjaa.com · [POSTAL ADDRESS]