Privacy

Effective 03/11/2026. Last updated 03/11/2026. HTML Block - HTML, CSS & JavaScript for Confluence ("HTML Block", "the app") is provided by Wattlebrooks Apps, Australia, through the Atlassian Marketplace.

The short version

• Your HTML, CSS and JavaScript are saved inside the Confluence page, not by the app.
• The app stores only two site-wide guardrail settings. No page content and no personal data.
• Everything stays inside Atlassian. Nothing is sent to outside servers or third parties.
• Wattlebrooks Apps cannot access your site's data, and we never sell or share it.

Data the app reads

• The page's attachment list, only for a block set to render an attached file, so the editor can offer HTML files.
• The content of the one HTML file chosen for that block (up to 10 MB), when the block is shown.

Every read is made as the person viewing or editing the page, so nobody sees an attachment they couldn't already open in Confluence. Rendering happens in the viewer's browser, and nothing is kept between page views.

Data the app stores

One settings record per site with the two guardrails a Confluence admin sets: whether JavaScript is allowed, and the maximum safety profile. It holds no page content, no user names, no account IDs and no record of who changed it. It is kept in Atlassian-hosted app storage, encrypted at rest, and stays in your site's data region.

A block's code and settings are saved by Confluence with the page itself, like any other page content, and are covered by your Atlassian agreement.

Changes the app makes

HTML Block never changes your pages, attachments, spaces or users. Its only write is the guardrail settings, when a Confluence admin changes them. A block's own code is saved by Confluence when the person editing the page chooses Save.

What we do not do

• We do not send data to outside servers or third parties.
• We do not use cookies, analytics, tracking or AI in the app.
• We do not collect IP addresses, location or usage telemetry.
• We do not sell or share data.

If an author's own markup embeds an image or iframe from another website, the viewer's browser loads it like any link on a page. The app itself contacts nothing outside Atlassian.

Retention and deletion

The guardrail settings last until an admin changes them or the app is uninstalled; Atlassian deletes the app's storage after uninstall. Removing a block from a page removes its code. Code in blocks still on your pages stays there until you delete it.

Your rights

Because HTML Block stores no personal data, there is nothing for us to export or delete. For GDPR, CCPA or similar questions, contact us and we will help.

Children

HTML Block is a business tool and is not intended for people under 18.

This website

This website is a set of static pages. It sets no cookies.

Changes to this policy

We will update the date above when this policy changes and note material changes in the Marketplace release notes.

Contact

Email support@wattlebrooks.com or use the support portal.