Privacy Policy
Content Reuse Inventory for Confluence adds one page under Apps in the Confluence navigation. A scan reads every page body on the site and builds an inventory of the reusable content sources — native Excerpts, MultiExcerpts and synced blocks — with the pages that include each one, the orphans nobody includes and the includes whose source is gone, counted per space. The app is read-only: it changes no page and it sends nothing anywhere. Questions about this policy go to support@maxpetrov.pp.ua, read by the person who wrote the app.
The app runs entirely on Atlassian's own infrastructure using Atlassian Forge. Its manifest declares no permissions.external block and no remote hostname, and the only code that reaches outside the app calls Atlassian's own Confluence REST API through @forge/api. Nothing this app reads or writes leaves Atlassian's infrastructure, and the vendor operates no server your data passes through.
The inventory is kept in Forge app storage (storage:app), hosted by Atlassian inside your Atlassian cloud environment and scoped to your installation of this app. That is the only place the app writes.
The app stores no personal data. The inventory the page reads is built from page ids, node names and keys, counts and scan metadata — never page titles, never page bodies, never account ids. In full, Forge storage holds:
the id of each page that carries a source or an include, and the id of its space
the name or key of each Excerpt, MultiExcerpt and synced block found in a page body
the id of the source page and source block that each include points at
the space ids and space names used to group the tables and the counts
counts: sources, consumers, orphans, dangling includes, pages scanned and pages the app could not read
scan metadata: the scan id, when it started and finished, how many batches it has done, and the licence state at the time
Page bodies are read to find those nodes and are discarded batch by batch; no body text is kept. Page titles are shown on the inventory page, but they are read at that moment as the person looking at the page, through their own Confluence permissions, and are not stored. One exception during a scan: a native Excerpt Include names its source page by title inside the macro, and that macro parameter sits in the scan's working records until the scan finishes and resolves it to a page id. The working records are overwritten by the next scan.
The app performs no analytics, telemetry or tracking of any kind and writes to no sink outside Forge storage.
Scope | What it is used for |
|---|---|
| Reads page ids and page bodies to find Excerpt, MultiExcerpt and synced-block nodes and the includes that point at them. The same scope reads page titles as the viewer, so a page the viewer cannot open stays hidden. |
| Resolves space ids to the space names shown in the Sources table and the per-space counts. |
| Forge app storage for the scan's progress and the finished inventory. Nothing leaves Atlassian. |
The app reads no user directory and asks for no user scope, so it holds no account id, no display name and no email address of anyone on your site.
Two rules, both in plain words. A page the app itself cannot read — one restricted from the app — is not scanned: it is counted as unreadable in the scan status and never inventoried. A page the app can read but the person viewing the inventory cannot open is counted, never revealed: that person sees a row reading "restricted page" and a total of how many rows they cannot open, and no title, because titles are read as the viewer, not as the app.
Nothing. The app has no write scope on any Confluence content: it edits no page, unsyncs no block, deletes nothing and adds no macro. The only writes it performs are to its own Forge storage described above.
The vendor shares nothing with anybody, because the vendor receives nothing. There are no sub-processors, no third-party services, no advertising and no data sale.
Retention is one inventory at a time. When a scan finishes, the previous scan's metadata and progress markers are deleted and only the inventory rows the new scan still uses are kept; the rows it no longer uses are deleted in the same step. A scan runs weekly on a schedule and whenever an administrator presses Scan now. Uninstalling the app removes its installation and, with it, the Forge storage that installation owned.
Because the app stores no personal data, there is nothing to export, rectify or erase on request. A request under GDPR, UK GDPR or CCPA can be sent to the address below and will be answered with this same statement and with whatever evidence the requester asks for.
Report a suspected vulnerability to support@maxpetrov.pp.ua with the words SECURITY REPORT in the subject. Reports are acknowledged and triaged by the person who wrote the code. A fix ships as a new Forge version; Forge apps on Atlassian cloud are upgraded by Atlassian, so there is no customer-side patch step. The security policy is a separate page linked from the app's Marketplace listing.
Max Petrov — support@maxpetrov.pp.ua. One address, read by the person who wrote the app.