.png)
Specs & security
What Page Order needs, what it can reach, and where your data goes.
v3.3.0 — Latest
Runs on Atlassian
Atlassian Forge
Confluence Cloud
Technical specifications
| Detail | Value |
|---|---|
| Platform | Atlassian Forge (Cloud only) |
| Product | Confluence Cloud |
| Installation | Atlassian Marketplace |
| Where it opens | Organize Child Pages in any page’s ••• menu, Page Order in each space’s sidebar, and Page Order for Confluence under Apps. See Where to open it. |
| Licensing | Free for teams of 10 or fewer users; paid tiers above, billed through the Atlassian Marketplace. See the pricing calculator for current rates. |
| Page moves per save | Up to 1,000. See Limits. |
| Runs on Atlassian | Yes. The app runs entirely on Atlassian infrastructure and declares no external domains, so no data leaves your Confluence site. |
| Data storage | None. No Forge storage and no database; one display setting is kept in your browser. |
| Authentication | As the signed-in person, through Forge. No API keys, tokens or other secrets. |
| Themes | Light & dark, matched to your Confluence theme |
| Personal data | None stored. While you use it, the app reads page titles, parents, positions and dates, and the spaces you can see, all as you. It doesn’t read what is written on a page. No external egress is declared, so nothing reaches a DataPingo server, and there is nothing for the app to delete when it is uninstalled. |
| Current Version | 3.3.0 |
| Last Updated | October 2026 |
System requirements
- Active Confluence Cloud site
- Modern web browser
- Active internet connection
- To change an order: Space admin, or Manage all content, in that space — the same permission Confluence’s own Move needs
Permissions required
Seven scopes, and no others:
write:confluence-content— move pages. The app uses Confluence’s v1 move call, which needs this scope; the granularwrite:page:confluenceis still in beta for that call.write:page:confluence— rename a page whose title is already used in the space it is moving to, when you choose Rename and move.read:hierarchical-content:confluence— read the child pages of a page or folder in page tree order, which is the order the list shows and the order a save changes.read:page:confluence— read a page’s title, parent and dates (created and last updated, for the date sorts).read:folder:confluence— the same for folders, which sit in the page tree alongside pages.read:space:confluence— list the spaces you can see, find each space’s home page (its top level), and check whether you can move pages in a space (Space admin or Manage all content).search:confluence— find a page by title in Move to…, count what is beneath a page (Confluence won’t move one with more than 1,000 items beneath it), and fill in Last updated in the space list.
No admin rights, no storage, no impersonation. The app acts as you and can only see and move what you could by hand. It requests no space or site administration permissions, no storage scope, and no way to act for anyone who isn’t at the screen.
Cloud only: Page Order is built on Atlassian Forge and runs exclusively on Confluence Cloud. Confluence Server and Data Center are not supported.
Privacy & security
- Data Privacy: DataPingo Privacy Policy
- Security: DataPingo Security Policy
- Data Storage: None. The app has no Forge storage, no database, no triggers and no scheduled or background jobs. Unsaved changes exist only in your open tab, and the order itself lives in Confluence’s page tree.
- Browser setting: Whether the page tree is shown is kept in your browser’s local storage. It never leaves that browser, and if the browser blocks it the tree is simply shown each time.
- Authentication: Every call to Confluence is made as you — through
requestConfluencein your browser, andapi.asUser()on Forge while a save runs. The app never acts as itself, uses no impersonation, and holds no secrets, API keys or personal access tokens. - Saving: A save runs only while your tab is open, in short stretches your tab starts, so nothing acts for you once you have gone. See App technical information.
- Egress: None. No external domains are declared, nothing is sent outside Atlassian, and the app has no web triggers or API of its own for anything outside Confluence to call.
- Logs: The app writes no logs of its own. If its screen ever fails, the error is shown to you and written to your own browser’s console.
- Customer information: We receive customer details only through the Atlassian Marketplace. We do not sell, distribute or share that information.
- Reporting a security issue: security@datapingo.com
- Uninstalling: Nothing to clean up. Pages stay exactly where you put them, because the order belongs to Confluence’s page tree, not to the app.