Security & Privacy
At QuickDraw, the security and privacy of your collaborative work are our top priorities. We've implemented multi-layered security measures to ensure your data stays yours.
Data Isolation
Rooms are isolated by unique slugs and IDs. Access is restricted to participants who possess the room link.
Secure Authentication
We use Clerk for identity management, ensuring state-of-the-art protection for user accounts and session tokens.
Privacy First
Brush strokes are only shared with participants in your room. We do not use your data for training third-party models.
Encrypted Transport
All data sent between the client and server (both HTTP and WebSocket) is encrypted via TLS/SSL.
Reporting Vulnerabilities
If you discover a security vulnerability, please do not open a public issue. Instead, follow the process outlined in our SECURITY.md file in the root of the repository.
Security Baseline
- Regular dependency updates via Dependabot
- Automated CI security scanning (GitHub Actions)
- No long-term storage of sensitive user metadata