unusedapps.com · App Footprint Auditor

Privacy

Written to be checked, not to be waved at a compliance form. Every statement below describes something in the source code or an HTTP request you can observe yourself.

Last updated 26 July 2026. Data controller: Agon Systems. Contact: [email protected].

The short version

• The Jira app sends nothing anywhere. It makes no external network call of any kind. Everything it reads stays inside your own Atlassian infrastructure, and we never receive it — not in aggregate, not anonymised, not at all.
• We cannot see your findings. We do not know what the app found on your site, whether you ran it, or whether you came back. This is a consequence of the architecture, not a promise we are asking you to trust.
• The only thing stored is what you type. Renewal costs you enter yourself, held in Atlassian’s own app storage on your site. Uninstalling the app deletes it.
• This website does run third-party monitoring — Cloudflare’s, injected automatically. Details below, because the earlier version of this site claimed otherwise and that was false.

What the Jira app reads

It calls these Atlassian REST endpoints, as the app, using the permissions you granted at install. Nothing else:

• Custom field definitions — names, descriptions and types, to work out which app created each field.
• Dashboards and their gadgets — which gadgets are placed where, and which gadgets each installed app offers.
• Workflows and their rules — to attribute rules to the app that provides them.
• Your Jira user directory — this is how the app discovers what is installed, because Atlassian creates an account for every app. The response also contains your human users (display names, account IDs, and in some configurations email addresses). The app filters for accounts of type app and discards the rest in memory. None of it is stored or transmitted.
• Issue keys and issue history — a sample of recently updated issues, then their change history, to find which apps have actually been changing issues and when. The app reads only the author, the timestamp and the name of the field that changed.

It never reads issue content. No summaries, descriptions, comments, attachments or field values. One caveat, stated because it is true rather than because it is flattering: Atlassian’s change-history response includes the before-and-after values of changed fields. The app does not read those values, does not store them and cannot send them anywhere — but they do pass through memory while the response is parsed. We cannot ask Atlassian for a narrower response than the endpoint returns.

What is stored, and where

Only the renewal costs you type in: an app name, an annual figure, and a currency. They are kept in Atlassian Forge app storage, which lives on your own Atlassian site under Atlassian’s control. We have no access to it.

Deletion: use Clear all costs in the app, or uninstall it — uninstalling removes the app’s storage entirely. There is nothing for you to email us about, because there is nothing of yours on our side to delete.

The free checker on this site

The checker runs entirely in your browser. What you paste into it is never uploaded, and the page has no code that could upload it — there is no form submission, no request, no server involved. This is verified on every release by a test that loads the live page in a real browser and records every network request it makes.

What this website does collect

This site is hosted on Cloudflare Pages, which injects its own scripts automatically. Loading any page here makes these requests, and we do not control them:

• static.cloudflareinsights.com/beacon.min.js and /cdn-cgi/rum — Cloudflare Web Analytics and Real User Monitoring. Aggregate page views and load timings.
• /cdn-cgi/scripts/…/email-decode.min.js — obfuscates the contact address against scrapers.

Cloudflare also keeps standard server logs, which include IP addresses, as any web host does. This site sets no cookies and writes nothing to local or session storage — verified, not assumed. We run no advertising, no tracking pixels and no third-party analytics of our own.

An earlier version of this site claimed “no network calls of any kind”. That was false, and a browser trace caught it. It is recorded in our own notes as a mistake rather than quietly corrected.

Email

If you write to [email protected], your message and address sit in a Google Workspace mailbox and are used to reply to you. No mailing list, no newsletter, no marketing automation, and your address is never passed on. Ask and it is deleted.

Your rights

Under UK and EU data protection law you may request access to, correction of, or deletion of personal data we hold, and object to processing. In practice the only personal data we hold is an email address, and only if you sent us one. Write to [email protected] and you will get a reply from a person.

Data processed inside your Jira site is handled by Atlassian as your processor, under your agreement with them. We are not in that path.

Changes

If this policy changes in a way that affects what is read, stored or sent, the change will be dated here. The app is free and has no account system, so there is no list to notify.