Security & data handling

The safest data is data we never have. Our apps are built to keep it that way.

At a glance

App	Permissions	We store	Data leaves the platform
Clear Gadgets for Jira	read:jira-work	Nothing	No
Spec Table	read_products, read_metaobjects	Session record only	Session record only, to our server
Sticky Cart	None	Session record only	Session record only, to our server
Blog TOC	Manage Embedded Scripts, Read basic app instance info	Nothing	No
Product Compare	Read products, Read catalog version	Nothing	No
Product Nav	Read products, Read categories, Read catalog version	Nothing	No

Clear Gadgets for Jira and Atlassian Forge

Clear Gadgets is a Forge app: Atlassian hosts and runs it. The gadgets call Jira as the signed-in user, so Jira’s own permissions decide what each person sees. The app has no egress (it contacts no server outside Atlassian), uses no Forge storage, and keeps no logs with your data. These are the conditions of Atlassian’s “Runs on Atlassian” program; the badge appears on the Marketplace listing once Atlassian confirms it.

Data residency: there is no app data to place in a region. Your issues stay in your Jira site under your site’s data residency settings.

Shopify apps

Both Shopify apps render inside your theme and Shopify admin. Their backend runs on a server we operate in Croatia (EU) and stores one session record per store (store domain, the app’s access and refresh tokens, granted scopes), needed to open the app in Shopify admin, and deletes it when you uninstall. They read no customer or order data. Sticky Cart by Gizmonger requests no API scopes at all.

Wix apps

Blog TOC by Gizmonger, Product Compare and Product Nav run in the visitor’s browser and read only your own site’s content through Wix. Wix stores their settings. None of them runs on a server of ours; Blog TOC’s plan check is an endpoint hosted by Wix that stores nothing.

Clear Gadgets for Jira

Platform: Jira Cloud
Runs: Built on Atlassian Forge. The gadgets run in your browser inside Jira and call the Jira REST API through Atlassian as the signed-in user. The app has no servers of its own.
Permissions: read:jira-work — Search issues and read their status, assignee, parent, story points, time tracking, due date and sprint, plus saved filters, boards, sprints, versions and field metadata, so the gadgets can count. The app never writes to Jira.
We store: Nothing
Third parties: None
Data residency: The app keeps no data of its own, so there is nothing to place in a region. Issue data stays in your Jira site, under your Jira data residency settings. The app runs on Atlassian’s Forge platform.

Full detail: Clear Gadgets for Jira privacy

Spec Table

Platform: Shopify
Runs: The tables are part of your theme, rendered by Shopify. The settings page runs inside Shopify admin and is served by the app’s backend, which Technobabble d.o.o. operates.
Permissions: read_products — List your product metafield definitions so you can choose which ones the table shows. read_metaobjects — Show metafields that reference metaobjects (for example a material or a size guide entry).
We store: Your store’s myshopify.com domain, the app’s Shopify access and refresh tokens and the granted scopes. The app needs these to open its settings page in Shopify admin.
Third parties: None
Data residency: Product data stays in Shopify. The app’s backend, on a server we operate in Croatia (EU), holds only the session record listed above. Shopify provides the store, payment and customer data; the app never reads customers or orders.

Full detail: Spec Table privacy

Sticky Cart

Platform: Shopify
Runs: The bar is a small script in your storefront, delivered by Shopify as a theme app embed. It runs in the shopper’s browser. The app’s backend, which Technobabble d.o.o. operates, only handles installation.
Permissions: None
We store: Your store’s myshopify.com domain, the app’s Shopify access and refresh tokens and the granted scopes, needed to install the app and show its setup page.
Third parties: None
Data residency: Nothing about shoppers or carts leaves the storefront: Add to cart posts to your own store’s cart, handled by Shopify. The app’s backend, on a server we operate in Croatia (EU), holds only the session record listed above.

Full detail: Sticky Cart privacy

Blog TOC

Platform: Wix
Runs: A small script that Wix adds to your blog post pages. It runs in the visitor’s browser and reads only the post on the page. Once per page view (cached for 10 minutes) it asks the app’s Wix-hosted endpoint whether your site’s plan is still active; the answer is yes or no, nothing is stored, and the table of contents stays visible if the check fails. We run no server of our own.
Permissions: Manage Embedded Scripts — Add the table-of-contents script to your site’s blog post pages. Read basic app instance info — Default Wix permission every app has: which site the app is installed on and its plan.
We store: Nothing
Third parties: None
Data residency: The app keeps no data. Settings are stored by Wix; post content stays on your Wix site.

Full detail: Blog TOC privacy

Product Compare

Platform: Wix
Runs: A site plugin on your product pages, running in the shopper’s browser. It reads products from your own Wix Stores catalog through Wix. There is no backend.
Permissions: Read products — Read the products a shopper chose to compare (name, price text, options, info sections) from your Wix Stores catalog. Read catalog version — Tell whether the store uses catalog V1 or V3, so the app reads products the right way.
We store: Nothing
Third parties: None
Data residency: The app keeps no data. Product data stays in your Wix Stores catalog; settings are stored by Wix.

Full detail: Product Compare privacy

Product Nav

Platform: Wix
Runs: Two site plugins running in the shopper’s browser: the arrows on product pages, and an invisible helper on collection pages that notes which collection is being browsed. There is no backend.
Permissions: Read products — Find the previous and next product in the collection. Read categories — Read the collection the shopper came from and its product order. Read catalog version — Tell whether the store uses catalog V1 or V3.
We store: Nothing
Third parties: None
Data residency: The app keeps no data. Product data stays in your Wix Stores catalog; settings are stored by Wix.

Full detail: Product Nav privacy

How we work

All traffic to our apps and this site uses HTTPS.
Each app asks for the fewest permissions that let it work; we explain every one.
No app asks for or stores your passwords or personal API tokens.
We update dependencies when security fixes are published.
We hold no third-party security certifications (such as SOC 2 or ISO 27001).

Reporting a vulnerability

Email gizmonger@technobabble.hr with “Security” in the subject. We confirm receipt within two business days and keep you posted until it’s fixed. Please give us reasonable time to fix an issue before publishing it. Machine-readable contact: security.txt.