TheJ Privacy Policy

Version 0.5 · Effective 11 October 2026 · Applies to TheJ 0.5 for Windows (Microsoft Store and standalone installer)

TheJ is made by Saanu John, an individual developer in India ("we", "us"). Contact: connetthej@gmail.com.

Summary

1. Information stored on your computer

TheJ stores the following on your computer. We do not receive it unless you send it to us.

TheJ does not encrypt your board files on disk. Anyone or any software with access to your files may be able to read them. Backup and cloud-sync tools you use follow their own settings.

2. Online collaboration (beta)

Nothing is sent unless you choose Share, join with a code, or agree to join the live session of a shared board you open. When you do:

What is sent

Board changes, notes and comments, images and other files on the board (up to 200 MB each), image previews, your cursor position, selection and view area, item locks, your display name and colour, and your role (host, editor or viewer). This goes to the other people in the session, through our relay and, where possible, directly between computers.

Your display name is the name you set in TheJ. If you have not set one, TheJ uses your Windows account user name. Change it before sharing if you do not want others to see it.

End-to-end encryption

The content above is encrypted on your computer with the board key before it is sent. Only people who have the board key can read it. The relay cannot read board content, names in normal sessions, cursors or images.

Exception: when someone joins with a join code, their display name is sent to the relay in plain text so the host can see who is asking. After the host approves, the board key is sent to them encrypted, and everything after that is encrypted.

Our relay server

The relay is a small server we run on Cloudflare Workers and Durable Objects (thej-relay.connetthej.workers.dev). It passes encrypted messages between session members and enforces roles. It can see:

What the relay keeps:

InformationHow long
Board content, images, previews, cursors, messagesNot stored. Passed through in memory only.
Room record for each shared board: board ID, owner and current host device IDs, member device IDs and roles, removed (blocked) device IDs, a hash of the join token, room settings and an edit counterKept in Cloudflare Durable Object storage so returning members are recognised. The current version does not delete these records automatically. Ask us to delete them (section 8).
Join codes (code and board ID)A code expires 24 hours after it is created by default and can be made single-use. Making a new code retires the old one. Expired codes are deleted when next looked up or replaced.
IP addresses for rate limitingHeld in memory to limit join-code guessing (about 10 tries a minute; repeated misses lock an address for 15 minutes). Not written to storage by our code.

Each board's room is created in a Cloudflare region near the first person who opens it (for example Asia-Pacific). Cloudflare uses your approximate location from your IP address to choose the region. Cloudflare processes connection data as our hosting provider under its own privacy policy. We have not enabled request logging in the relay's configuration.

Direct (peer-to-peer) connections

To make sessions faster, TheJ tries to connect session members' computers directly using WebRTC. To set this up, it contacts public STUN servers run by Cloudflare (stun.cloudflare.com) and Google (stun.l.google.com), which see your IP address. Other people in the session can see your IP address when a direct connection is made. Direct traffic is encrypted. If a direct connection fails, the relay is used instead.

What other members can do

People in a session receive the board and its files and can keep their own copies, including after you leave or remove them. Hosts can approve, deny, change roles and remove people.

3. Other times TheJ goes online

TheJ 0.5 does not use local-network discovery from its menus. An older same-network sharing tool remains in the code but is not reachable from the app's menus.

4. Diagnostics and crash reports

TheJ writes diagnostic logs on your computer. After a crash it can save a text report and a memory dump to your Desktop. These may contain file paths, technical details or fragments of your data. TheJ does not upload them. If you choose to email them to us or attach them to a GitHub issue, review them first. GitHub issues are public.

Windows and the Microsoft Store may collect their own diagnostics under Microsoft's settings and policies.

5. What we do not do

6. How we use information

We use the information the relay handles only to run online sessions: delivering messages, checking who may join, enforcing roles, and preventing abuse. We use emails and reports you send only to provide support. We may disclose information if required by law.

7. Service providers

ProviderWhy
CloudflareHosts the relay and a STUN server (online collaboration)
GooglePublic STUN server (direct connections)
GitHub (Microsoft)Update checks and downloads for the standalone build; issue tracker
Microsoft StoreDistribution and updates for Store copies

These providers may process data in countries other than yours.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or object to the use of your personal information, and to complain to a data-protection authority. Contact us and we will respond within a reasonable time.

9. Security

We use end-to-end encryption for session content, signed device keys and rate limiting. No system is perfectly secure. Online collaboration is in beta, so avoid sharing highly sensitive material.

10. Children

TheJ is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

11. Changes to this policy

This policy describes TheJ 0.5. We will update it when features change, for example before adding accounts, paid features or new online services, and change the date above.

12. Contact

Saanu John, India · connetthej@gmail.com