Privacy manifesto

Nothing about you ever leaves this room.

CodeB Conference is a meeting tool, not a data product. We don't run analytics on you, we don't log who you spoke to, we don't keep your face or voice anywhere, and we don't sell anything to anyone about you. This page is an exhaustive enumeration — not a marketing tagline.

01 / Things we do not do

The list of "no".

None of the following exist anywhere in CodeB Conference. No exceptions, no "but only if you opt in", no asterisks.

02 / Things we do

The list of "yes — briefly".

The list of things that actually happen is short enough to fit on this page.

03 / Third-party network calls

Where bytes leave our network.

Three external hosts may be contacted by the browser, depending on which features you use. None of them ever see your video, audio, chat or files.

HostWhyWhat it seesAvoidable?
Public web-fonts CDN Loads the Raleway + IBM Plex Mono typefaces for the page chrome. Your IP and the fact that you opened the page. No content. Yes — replace with self-hosted woff2 files in the css/ folder for a fully offline build.
Public STUN servers STUN — tells your browser its own public IP so WebRTC can negotiate a direct connection. One small UDP packet per call. No media, no name, no room code. Yes — point StunHosts in web.config at the CodeB TURN server, which also speaks STUN.
Public asset CDNs Loads the MediaPipe Selfie Segmentation model — only if you enable Background Blur. Two HTTP requests at first activation. Model is then cached. Yes — mirror the WASM + .tflite files locally and edit two URLs in conference.js.

For an air-gap install, the WebRTC signaling, TURN relay, JS, CSS, fonts and ML model can all live on the customer's own LAN. The build supports it; the recipe is documented in the deployment README.

04 / A note on the amber screen

Why the colour scheme looks like a 1980s terminal.

The accent colour you see throughout CodeB Conference — that warm #f5a524 against the deep #0a0d12 background — is a deliberate tribute to amber-phosphor CRT monitors.

For roughly fifteen years, from the late 1970s into the early 1990s, the people who ran the world's most consequential computers stared at amber screens. The IBM 5151, the Wyse 50, terminals on hospital nursing stations, manufacturing line PLCs, air-traffic-control consoles, defence command terminals — they all glowed in this same warm yellow at around 580 nm wavelength.

The reason wasn't aesthetic. Amber phosphor (P3, later P134) was chosen because it sits in the sweet spot of the human eye's photopic sensitivity curve. Operators staring at a screen for ten or twelve hours — radiologists, air-traffic controllers, machine-tool programmers — experienced measurably less eye fatigue with amber than with the otherwise-common green P1 phosphor, and significantly less than with the white CRTs that became fashionable later. Amber was the colour of tools for people whose work mattered.

C:\> LOGON CONSOLE.42
ACCESS GRANTED · OPERATOR SE-002 · 2026-05-22 09:14:33
> DIAL ROOM TEAM-STANDUP
ROOM OK · 3 PEERS · TURN OK
>

That's the lineage we wanted CodeB to invoke. A serious tool for people doing serious work — clinicians, engineers, factory operators, public servants, defence supply chains — the same people CodeB Identity Solutions has served for two decades. The codeb.io design language uses amber the way those terminals did: high signal, no decoration. There is one accent colour because the work is what matters; the chrome shouldn't compete with it.

(And there's a small practical bonus: against a dark background, amber has the highest perceptual contrast of any single accent colour, and it remains distinguishable to people with the most common forms of red-green colour vision deficiency. The 1980s engineers picked it for ergonomic reasons; we picked it for the same ones plus a bit of historical respect.)

05 / Commitments

The promise written down.

If any of the items in section 01 ("things we do not do") ever stops being true, this page changes before the change ships. We won't roll trackers in quietly. We won't bury new analytics three menus deep.

The source code for CodeB Conference lives on your own IIS server. Every JavaScript file, every C# handler and the entire TURN service is open to inspection by anyone in your organisation. There is no obfuscation, no minification step that hides logic, and no compiled binary that contains anything not visible in the source.

If you spot something in the running app that contradicts this manifesto, please write to info@codeb.io. A real person reads that inbox — or answers that phone.

See also: data flow · features · Aloaha privacy manifesto

A note on cookies and OIDC sign-on

CodeB ships with a built-in OpenID Connect identity provider. We make a deliberate trade-off: no cookies, anywhere on the site, including for SSO. Instead, when you sign in at the IdP, the server stores a short-lived signed assertion in localStorage at the IdP origin only (phone.codeb.io) so that a second relying party can re-use your authentication for 30 minutes without re-prompting. That assertion is:

In short: the privacy promise is “no cookies”, and we keep it. Where session continuity was needed, we used a different storage primitive on purpose and scoped it as narrowly as we know how.