Closed q10123p closed 3 years ago
1j01Â instead of adding a question label, just answer it! Why is it your app (jspaint.app) sending what user paint to you?!
As far as I remember, it use firebase to store your history, it's used to restore your progress and organize online collaboration sessions.
So, this app has no privacy at all.
@q10123p, i just checked default session, and it actually has no request which sends any your drawings to dev. When you open new session it starts in local mode, and nothing goes beyond your browser which is somehow can compromise you. It stores data in local storage:
Only in public session here's web socket connection to firebase:
Also here's disclaimer that all multi-user sessions are public. Your issue seems unreasonable, or you get scummed by app clone(?)
@1j01 here's only one thing i noticed, every draw app re-requests tool icon:
I guess I'll open new issue about that, if there are none yet?
https://jspaint.app doesn't send any information to a server (or "to the app developer") by default.
There are a few features which do talk to a server:
If the URL starts with https://jspaint.app/#local:
, it's a local session, private to you. You can view all local sessions with File > Manage Storage.
If the URL starts with https://jspaint.app/#session:
, it's a multi-user session. Multi-user sessions are currently entirely public. (That is, there's no support for private online collaborative sessions yet.)
If the URL doesn't start with https://jspaint.app/
, it's an unofficial instance, and may have invasive advertisements and trackers.
If you got linked to the app via a multi-user session URL, this may be confusing, and I'm sure I could do something better to handle that case, like explaining in the disclaimer dialog how to switch to a private local session.
I guess I'll open new issue about that, if there are none yet?
@Zekfad Please do. These icon requests are for the Document History view (Extras > History), but it shouldn't be making requests on every brush stroke!
Thank you all.
Closing in favor of:
Why is the app sending user draw history to the app developer?! Why is the app sending what i draw to the app developer?!