This app stores nothing. It has no database, no index, and no server of its own. Every result is computed while you view the page and then discarded. Nothing your Confluence contains is ever sent outside Atlassian's infrastructure, and the developer has no way to read it.
This policy applies to Backlinks for Confluence ("the app"), a Forge app distributed through the Atlassian Marketplace and published by kuku ("we", "us").
The app runs entirely on Atlassian's Forge platform. It is not a hosted service, and we operate no servers in connection with it.
To list which pages link to the page you are viewing, the app reads the following through Atlassian's APIs, on your behalf and using your own permissions:
| Permission | What it is used for |
|---|---|
read:page:confluence |
Read the title of the page you are viewing, and the stored content of candidate pages in order to confirm whether they actually contain a link to it. |
read:space:confluence |
Read the space key, only when the "only show links from this space" option is enabled, so that the search can be limited to that space. |
search:confluence |
Run a search to narrow down which pages might link to the current page, before each one is checked. |
All three permissions are read-only. The app cannot create, modify, or delete any content in your Confluence site.
Every request the app makes runs as the person viewing the page, never as an administrator or a service account. If you cannot open a page in Confluence, that page will not appear in your results.
This is a deliberate design choice: it means the app cannot be used to reveal the existence of restricted content to someone who is not entitled to see it.
Nothing. The app maintains no index, no cache, and no copy of your content.
Results are calculated when a page is rendered and exist only for the duration of that request. When you navigate away, nothing remains. There is no data of yours for us to lose, sell, or be compelled to disclose, because none is ever retained.
All processing takes place inside Atlassian's Forge runtime, on Atlassian-operated infrastructure, within the same trust boundary as your Confluence site. Your content does not pass through any system belonging to us.
The app declares no external network access, so it is technically incapable of sending data to any outside host.
The app uses no third-party services, analytics, advertising, tracking pixels, or telemetry of any kind. No data is shared with anyone.
We want to be precise rather than reassuring here. If the app encounters an error, the Atlassian Forge platform may record a diagnostic log entry that the developer can view. Such an entry may contain an identifier of the page involved and an HTTP status code. It does not contain page content, page titles, user names, or email addresses.
These logs are retained and controlled by Atlassian under their own retention policy, not by us.
The app does not collect, request, or process personal data. It does not read user profiles, account details, email addresses, or comments. Under the GDPR and comparable laws we do not act as a data controller for any customer content, because we neither determine the purposes of its processing nor retain it.
Because the app retains no data, there is nothing to export or erase. Uninstalling the app from your site removes its access immediately and completely. Site administrators may also revoke its permissions at any time from Confluence's app management screen.
The app inherits the security controls of the Atlassian Forge platform, including Atlassian's authentication, permission enforcement, and sandboxed runtime. Because the app holds no credentials of its own and stores no data, the usual risks of a third-party integration — credential leakage and breach of a vendor-held copy of your content — do not apply.
If the app's behaviour changes in a way that affects this policy, we will update this page and change the date shown at the top. Material changes will also be noted in the app's Marketplace release notes.
Questions about this policy or about the app's handling of data can be sent to backlinks@231652.xyz