SpaceGuard privacy notice

SpaceGuard is a Forge app for Confluence Cloud. It copies page restrictions from a parent page onto a child when an admin enables that space. This notice describes what is stored and what is not.

简体中文摘要：SpaceGuard 只在客户的 Confluence Cloud（Atlassian Forge）内运行。规则与最近运行记录存在 Forge 存储；不发往 Codeland 自有服务器，也不调用公网远程接口。

Who processes data

The app runs on Atlassian Forge. There are no remotes, no web triggers, and no egress to Codeland-operated hosts. Atlassian hosts the functions, UI, and storage.

Data the app stores (Forge KVS, per installation)

Stored	Example	Why
Space key	`DOCS`	Rule belongs to a space
Rule flags	enabled, inherit edit/view, updated time	Admin’s choice
Run log (last 20 per space)	space key, page id, parent page id, result codes, time	Admin troubleshooting

The run log does not include page titles, bodies, account ids, display names, group names, or email addresses.

A bulk walk may temporarily store a cursor that includes the starting admin’s account id until the walk finishes; that id is cleared when the walk ends. CSV audit output is returned to the admin UI in the function response and is not written to Forge storage, emailed, or sent off Atlassian.

Data read from Confluence, not stored as content

Page id, parent id, status (title discarded if present)
View/edit restriction principals on parent and child
Space keys/names for the admin space list (names shown in UI, not persisted)

What this app does not do

No analytics or support telemetry to Codeland
No Codeland sub-processors beyond Atlassian
No logging of titles, bodies, names, or emails

Retention

Saving a rule overwrites that space’s rule. Only the latest 20 runs per space are kept. Uninstall removes Forge app storage for that installation. There is no Codeland retained copy outside Atlassian.

Contact

Security / support: lijianbao@codelandhk.com