Short version: rooms are private by default, access is token-based, and analytics avoids room content. This page explains the current hosted product behavior in plain language.
Last updated: June 25, 2026Roomboard stores the room document you create: room name, cards, comments, connector lines, review statuses, activity history, room access state, and uploaded image references. Hosted rooms use Supabase for durable room data and file storage.
New rooms are private and locked by default. Access is controlled by a creator token saved in the creator's browser and role-specific invite tokens for editors or viewers. Private rooms are not exposed as an open public directory.
Roomboard remembers creator and invite tokens in local browser storage so you can return to rooms without an account. The owner backup link carries creator access to another browser or device, so treat it like a private access key. Anyone with access to that browser profile or owner backup link may be able to reopen rooms remembered there, so use a trusted device for sensitive reviews.
Image uploads are checked against room edit access before being accepted. Roomboard supports PNG, JPG, GIF, and WebP uploads up to the app limit and rejects SVG uploads. Hosted uploads use a private storage bucket and are returned as signed asset URLs to people who can access the room. Treat signed URLs as bearer links until they expire.
When you join a room, Roomboard may send your display name, color, cursor position, and recent activity state to other people in the same room so collaboration feels live. Presence is scoped to the room session.
Roomboard uses Vercel Web Analytics and product events to understand the launch funnel: landing CTA clicks, room creation, display-name setup, first card creation, uploads, comments, status changes, connector creation, invite copying, access changes, close-room actions, and recap actions. These events avoid room names, room IDs, invite tokens, owner tokens, filenames, image URLs, display names, messages, and card content.
Roomboard's current product flow does not require an account or payment to create or join a room. If account or paid workspace features are introduced later, this page should be updated before those flows are offered to users.
For privacy questions, removal requests, or room-access trouble, contact support@roomboard.online.