Yup, everything's via websockets. The backend stores the draw-commands in-memory, so the clients can restore the drawings by replaying the commands client side. No peer to peer stuff, wouldn't want to expose IP addresses or overcomplicate things :)