Privacy and security
The short version
This app stores only the variables an administrator types into it. It has no permission to read Confluence content and cannot access your pages.
What is stored
A single record per site containing the variable names and values an admin entered, plus the time they were last changed. Nothing else.
What is not stored
Page content, page titles, space names, user names, email addresses, account identifiers. The app never sees them.
Permissions requested
| Scope | Why |
|---|---|
| storage:app | Store the variables |
That is the complete list. No read scope, no write scope, no content access of any kind.
Where it runs
Entirely on Atlassian's Forge platform, in your site's own region. The app makes no outbound network calls and qualifies for the Runs on Atlassian designation. No data reaches the publisher or any third party.
A note on what you put in a variable
Variable values are visible to anyone who can view a page using them. Do not store passwords, API keys or confidential data in a variable.
Retention
Values persist until an admin removes them. Uninstalling deletes everything, per Atlassian's Forge data retention.
Security summary
| Question | Answer |
|---|---|
| Where is app data hosted? | Entirely within Atlassian Forge. No external egress. |
| Data stored outside Atlassian? | No. |
| Data transmitted to third parties? | No outbound requests of any kind. |
| What customer data is stored? | Administrator-entered variable names and values, and a timestamp. |
| Is personal data processed? | Only if an administrator deliberately types it into a value. |
| Write permissions to content? | None. No Confluence content scope at all, read or write. |
| Encryption | Atlassian's Forge storage, in transit and at rest. |
| Runtime dependencies | Atlassian's own libraries and React. |
| Vulnerability handling | Critical within 10 days, high within 28, per Atlassian's policy. |
| Incident response | Atlassian notified within 48 hours via ECOHELP. |
| Who can access customer data? | Nobody outside the customer's own installation. The publisher has no mechanism to read it. |