Faithful Markdown Export

Privacy and security

Last updated 16 September 2026.

This policy covers Faithful Markdown Export for Confluence, an app published on the Atlassian Marketplace by Second Tiger (두번째호랑이, business registration 670-56-01033, Republic of Korea).

The short version: the app stores nothing. It reads the pages you ask it to export, converts them in your own browser, and hands you a zip file. Nothing is kept afterwards, and nothing is sent anywhere outside Atlassian.

What the app processes

When you run an export, the app reads from the Confluence site it is installed on:

It reads this as you, using your own Confluence permissions. It cannot see anything you cannot already see.

What the app stores

Nothing.

The converted Markdown exists only in your browser tab's memory until you download it. Closing the tab discards it.

Where the processing happens

Conversion and packaging run in your browser. The one piece of server-side work — fetching attachment bytes, which the browser frame cannot do for itself — runs inside the Atlassian-hosted Forge runtime and returns the file straight to your browser without storing it.

The app makes no requests to any host outside Atlassian. It declares no external egress, which is what qualifies it for Atlassian's Runs on Atlassian programme.

Data residency

Not applicable. Because the app stores no data, there is no data to hold in any region. Your content stays in the Atlassian region your site is already hosted in.

Permissions the app requests

ScopeWhy
read:page:confluenceRead the body and hierarchy of the pages being exported
read:space:confluenceFind the space and its home page for a space-wide export
read:attachment:confluenceList and download attachments so they can go into the zip
read:content-details:confluenceRead titles and parent relationships to rebuild the tree

The app requests no write access. It cannot create, change or delete anything in your Confluence site.

Sub-processors

None. Atlassian hosts the app as part of the Forge platform; there is no other party involved, and no third-party service receives your content.

Your rights

Because no personal data is collected or retained, there is nothing to access, correct, export or erase. If you believe that is wrong in some case we have not thought of, write to us and we will investigate and answer.

Security reporting

If you find a security problem in this app, please report it privately to yjkwon@winm2m.com rather than in a public issue. We aim to acknowledge within one business day. Our security policy sets out how reports are handled, how quickly issues are fixed, and what happens during an incident.

Changes

If this policy changes in a way that affects what the app processes or stores, the change will be published here with a new date, and described in the app's release notes.

Contact

Second Tiger (두번째호랑이)
183-32 Chungnyeong-ro, Sang-myeon, Gapyeong-gun, Gyeonggi-do 12448, Republic of Korea
yjkwon@winm2m.com