Privacy Policy

Effective 17 September 2026

Summary: Our apps run entirely on Atlassian's Forge platform, which Atlassian calls "Runs on Atlassian". Your Confluence content, including API specifications, is processed inside Atlassian's infrastructure and is never sent to servers operated by Fernlight or by any third party. We do not sell data, and our apps contain no advertising or tracking.

This policy explains how David Peattie trading as Fernlight ("Fernlight", "we", "us") handles information in connection with our apps for Atlassian Cloud ("Apps"), including API Docs for Confluence, and with this website.

1. Data processed by the Apps

Content

API Docs for Confluence reads and writes page attachments that contain API specifications, and reads the page the macro is placed on. These requests go through Atlassian's APIs, run with the permissions of the user viewing or editing the page, and are processed within the Forge runtime hosted by Atlassian.

Specifications are stored only as Confluence attachments on your pages, under your control.
Macro settings (such as the chosen attachment and display filters) are stored in the Confluence page itself.
The App declares no external network permissions, so it cannot send your content outside Atlassian. Atlassian enforces this and shows it on the Marketplace listing.

Fernlight has no access to your content. We cannot view your pages, attachments or specifications.

Operational data held by Atlassian

As with every Forge app, Atlassian gives us limited operational information: installation events, the site URL, invocation counts, error rates and application logs. We use it only to operate, support and improve the Apps. The Apps are designed not to write personal data or content to logs. Atlassian processes this data under its own privacy policy.

Licensing and billing

Purchases, trials and billing are handled by Atlassian through the Atlassian Marketplace. Atlassian shares licensing information with us, such as the licensed organisation's name, contact details, tier and license status, under the Atlassian Marketplace Partner Agreement. We use it to provide support and to meet legal and accounting obligations.

2. Support requests

If you email us, we receive your name, email address and whatever you include in your message. We use it only to answer your request, and keep it for as long as needed to provide support (normally no more than 24 months). Please do not send confidential specifications unless we ask for them. If you do, we delete them once the issue is resolved.

3. This website

fernlight.dev is a static website hosted on Cloudflare Pages. It sets no cookies and uses no analytics or third-party trackers. Cloudflare may process standard request data, such as IP addresses, for security and delivery purposes.

4. Sharing

We do not sell or rent personal information. We share it only with service providers needed to run our business (Atlassian, Cloudflare and our email provider), when required by law, or as part of a business transfer, in which case this policy would continue to apply.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete or export personal information we hold about you, or to object to its processing. Contact support@fernlight.dev and we will respond within 30 days. You can also complain to your local data protection authority. Because we hold no Confluence content, requests about content in your Confluence site should go to your site administrator or to Atlassian.

6. Security

See our Security page for how the Apps are built and how to report a vulnerability.

7. Changes

We will post any changes on this page and update the effective date. If a change materially affects how the Apps handle your data, we will announce it in the Marketplace listing's release notes.

8. Contact

David Peattie trading as Fernlight · support@fernlight.dev