Privacy Policy
Last updated: 2026
BoardAR ("the app", "we") is a free mixed-reality whiteboard that runs entirely in your browser. This page explains what data we collect — short answer: very little.
What runs where
The entire app is delivered as static files from Firebase Hosting. There is no application server. All drawing, hand tracking, marker logic, and image data live only inside your headset's browser for the duration of the session. When you close the tab, in-memory state is discarded.
What we don't do
- We do not collect your strokes, drawings, or anything visible on the board.
- We do not track your hand or controller positions on any server.
- We do not require an account, email, or sign-in.
- We do not show advertising inside the AR experience.
What is automatically logged
Firebase Hosting records standard HTTP request logs (IP address, request path, user agent, timestamp) for security and abuse prevention. These logs are managed by Google's infrastructure and are subject to Google's privacy policy. We do not access or aggregate these logs ourselves.
Optional analytics
If we add lightweight, privacy-respecting analytics in the future (for example Plausible), we will only count page visits and basic device categories — no personal identifiers, no cross-site tracking, no cookies. This page will be updated before any such tool is enabled.
Cookies
BoardAR does not set cookies. The browser may set its own cookies for unrelated reasons (for example WebXR session storage) — those are not under our control.
Third-party CDN
The Three.js library is loaded from unpkg.com. Your browser will make a request there to fetch the script. unpkg's privacy practices are governed by Cloudflare. If you prefer fully self-hosted assets, the source is open and can be redeployed without external CDNs.
Children
BoardAR is not directed at children under 13. We do not knowingly collect any personal information from children.
Contact
Questions about this policy? Email info@xeeus.com.