Privacy Policy
Last Updated: January 15, 2026
TL;DR: CFD Penney is designed with privacy in mind. We don't collect personal data, don't track you, and don't sell your information. Your annotations and collaboration sessions are peer-to-peer and not stored on our servers.
IMPORTANT - YOUR RESPONSIBILITY
USER RESPONSIBILITY FOR DATA PROTECTION:
While we respect your privacy and minimize data collection, YOU ARE RESPONSIBLE for protecting your own sensitive information:
- PEER-TO-PEER TRANSMISSION - Your content is transmitted directly to other participants. Once shared, we cannot control what they do with it
- NO ENCRYPTION GUARANTEE - While WebRTC uses encryption, we cannot guarantee absolute security. Do not share highly sensitive information
- SCREEN SHARING RISKS - When sharing your screen, other participants can see everything visible on your screen. Close sensitive windows first
- VIDEO/CAMERA RISKS - When using video or camera features, other participants can see and hear you. Be aware of your surroundings and what's visible in your camera view
- CHAT MESSAGING RISKS - Chat messages and file attachments are transmitted peer-to-peer. Once sent, recipients can save or share your messages. Do not share sensitive information via chat
- NO CONTENT STORAGE - We don't store your drawings, video streams, or chat messages. If you need to keep your work, export it locally before ending your session
- PUBLIC SESSIONS - If you share your session code publicly, anyone with the code can join. Share codes only with trusted participants
- NO RECOVERY - Once a session ends, content cannot be recovered. Save important work locally
USE COMMON SENSE AND PROTECT YOUR SENSITIVE INFORMATION. WE ARE NOT LIABLE FOR DATA YOU CHOOSE TO SHARE.
1. Introduction
Welcome to CFD Penney ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we handle information when you use our collaborative whiteboard and screen annotation tool.
2. Information We Collect
2.1 Information You Provide
CFD Penney is designed to work without requiring user accounts or personal information. We do not collect:
- Names, email addresses, or contact information
- Account credentials or passwords
- Payment information (the service is free)
- Personal identifiers
2.2 Automatically Collected Information
When you use CFD Penney, we may automatically collect limited technical information:
- Connection Data: Temporary session codes used to facilitate peer-to-peer connections
- Usage Statistics: Anonymous, aggregated data about feature usage to improve the service
- Technical Information: Browser type, device type, and operating system (for compatibility purposes)
2.3 Collaboration Session Data
CFD Penney uses WebRTC for peer-to-peer communication:
- Your drawings and annotations are transmitted directly between participants
- Session codes are temporary and expire after your session ends
- We do not store your drawings, annotations, or screen content on our servers
- Screen sharing and video calls are peer-to-peer and not recorded
2.4 Video and Camera Data
When you use video or camera features in CFD Penney:
- Camera Streams: Your camera video and audio streams are transmitted directly to other participants via WebRTC peer-to-peer connections
- No Recording: We do not record, store, or save any video or audio streams on our servers
- Device Permissions: CFD Penney requires camera and microphone permissions to enable video features. These permissions are requested by your browser and can be revoked at any time
- Device Preferences: Your selected camera, microphone, and speaker device preferences are stored locally in your browser and never transmitted to our servers
- Audio/Video Quality: Video and audio quality depend on your network connection and device capabilities. We do not process or enhance your streams
- Privacy Controls: You can turn off your camera or mute your microphone at any time during a session
- Peer Visibility: Other participants in your session can see your video stream while it's active. Once you turn off your camera, the stream stops
Important: Be mindful of what's visible in your camera view. Other participants can see everything your camera captures, including your surroundings, documents, or other people who may be in view.
2.5 Chat and Messaging Data
When you use the chat and messaging features in CFD Penney:
- Message Transmission: Chat messages are transmitted directly between participants via peer-to-peer WebRTC data channels
- No Server Storage: We do not store, log, or archive chat messages on our servers. Messages exist only in the active session
- Local History: Chat message history is stored locally in your browser's memory during an active session. This history is cleared when you close the session or browser tab
- File Attachments: Files shared via chat (images, documents, etc.) are transmitted peer-to-peer as base64-encoded data. We do not store these files
- File Size Limits: File attachments are limited to 5MB per file to ensure efficient peer-to-peer transmission
- Emoji Reactions: Emoji reactions to messages are transmitted peer-to-peer and stored only in local session memory
- Message Recipients: Messages are sent to all participants in your active collaboration session
Important: While we don't store your messages, other participants in your session can see, save, or screenshot your messages. Do not share sensitive, confidential, or personal information via chat.
3. How We Use Information
The limited information we collect is used solely to:
- Facilitate peer-to-peer connections between users
- Improve the functionality and performance of CFD Penney
- Troubleshoot technical issues
- Ensure service security and prevent abuse
4. Data Storage and Security
4.1 Peer-to-Peer Architecture
CFD Penney uses a peer-to-peer (P2P) architecture powered by WebRTC:
- Your data is transmitted directly between participants, not through our servers
- We only facilitate the initial connection between peers
- Once connected, all data flows directly between participants
4.2 Local Storage
CFD Penney may use browser local storage to:
- Remember your preferences (theme settings, tool selections)
- Cache session codes temporarily
- Store drawings locally if you choose to work offline
- Remember your device preferences (camera, microphone, speaker selections)
- Store chat message history temporarily during an active session (cleared when session ends)
This data never leaves your device unless you explicitly share it in a collaboration session.
4.3 Security Measures
We implement reasonable security measures:
- WebRTC connections are encrypted by default
- Session codes are randomly generated and temporary
- We use HTTPS to secure connections to our servers
- Regular security updates and patches
5. Third-Party Services
CFD Penney relies on the following third-party services:
- PeerJS: For peer-to-peer connection facilitation, including WebRTC signaling for video calls, screen sharing, and data channels for chat messaging (open-source library)
- WebRTC: Browser-native technology for peer-to-peer video, audio, and data transmission. WebRTC may use STUN/TURN servers for network traversal, but these servers do not store or access your media streams
- Google Analytics: We use Google Analytics to understand website traffic and usage patterns. Google Analytics collects anonymous information such as page views, time spent on pages, and general geographic location (country/city level). This data helps us improve the service and understand how users interact with CFD Penney. Google Analytics uses cookies and similar technologies. You can opt-out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser settings.
- Font Awesome & Lucide: For icon libraries (no tracking)
- Google Fonts: For web fonts (may collect basic analytics)
These services have their own privacy policies. We encourage you to review them. Note that WebRTC STUN/TURN servers are used only for network connectivity and do not have access to your video, audio, or chat content.
6. Cookies and Tracking
CFD Penney uses the following types of cookies and tracking technologies:
- Essential Cookies: Required for basic functionality (session management)
- Preference Cookies: To remember your settings (theme, tool preferences)
- Analytics Cookies: Google Analytics uses cookies to collect anonymous usage statistics, including page views, session duration, and general geographic information. This data is aggregated and anonymized and helps us understand how users interact with our website.
Analytics Data Collection: Google Analytics collects the following anonymous information:
- Page views and navigation patterns
- Time spent on pages
- General geographic location (country/city level, not precise location)
- Device type and browser information
- Referral sources (how users found the website)
This analytics data is used solely to understand website traffic and improve the user experience. We do not use advertising cookies or sell analytics data to third parties.
Opting Out: You can opt-out of Google Analytics tracking by:
7. Data Sharing and Disclosure
We do not sell, trade, or rent your information to third parties. We may disclose information only in the following circumstances:
- Legal Requirements: If required by law or in response to valid legal processes
- Safety and Security: To protect the rights, property, or safety of CFD Penney, our users, or others
- Business Transfers: In connection with a merger, sale, or transfer of assets
8. Children's Privacy
CFD Penney does not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.
9. Your Rights and Choices
You have the right to:
- Access: Request information about data we may have
- Deletion: Request deletion of your local storage data (via browser settings)
- Opt-Out: Disable local storage or cookies through your browser settings
- Portability: Export your drawings and annotations locally
- Camera/Microphone Control: Control camera and microphone access through your browser settings
- Chat History: Chat messages are stored only during active sessions and can be cleared by ending the session
10. International Users
CFD Penney is available worldwide. If you access our service from outside the United States, please note that your information may be transferred to and processed in countries where we operate. By using CFD Penney, you consent to such transfers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by:
- Updating the "Last Updated" date at the top of this policy
- Posting a notice on our website
- Continuing to use CFD Penney after changes constitutes acceptance of the updated policy
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Summary: CFD Penney is built with privacy as a core principle. We minimize data collection, use peer-to-peer connections to keep your data private, and never sell your information. Your collaboration sessions are your own.