Source code available here:
https://github.com/excalidraw/excalidraw

Drawings are end-to-end encrypted and Excalidraw's servers will never see them.