Privacy policy

Last updated 14 October 2026

fastjira, at fastjira.larvit.se, is a web client for Jira Cloud run by Larv IT AB, Sweden. Larv IT AB is the controller of the personal data described here. Questions and requests: lilleman@larvit.se.

What we store

When you connect fastjira to your Atlassian account, we keep in our own database:

  • your Atlassian account id;
  • the access and refresh tokens Atlassian issues to fastjira for your account, encrypted;
  • the names, addresses and ids of the Jira sites you let fastjira reach, encrypted;
  • for each Jira project you open an issue form in, the names and account ids of the people who can be assigned issues there, encrypted, so the form does not have to ask Jira each time;
  • for each Jira project you create an issue in, its issue types, encrypted.

Issues and comments are read from Jira when you open a page, and are not stored.

Cookies

  • fastjira_session: your Atlassian account id, name and email address, encrypted, so fastjira knows who is signed in. Kept 14 days.
  • fastjira_oauth_state: protects the connect step against forgery. Kept 10 minutes.
  • fastjira_boards: your Jira site's list of boards, encrypted, so the menu shows them without asking Jira. Kept 15 minutes.
  • plainpages_csrf: protects forms against forgery, and holds no personal data. Kept 30 days.

There are no analytics, advertising or tracking cookies, and no third-party scripts.

Logs

The server logs each request's method, address without its query string, status and duration, with no IP address, account id, name or email address. Some log lines name a Jira issue or project, and when Jira refuses a request its error message is logged as Jira wrote it, which can include a person's account id or name, or a value from the issue. When fastjira itself cannot be reached, the web server's error log may record the requesting IP address.

Why, and on what legal basis

We use this data only to provide what you ask for when you connect: to sign you in, and to show and change your Jira data on your behalf (GDPR article 6(1)(b), performing our agreement with you). Logs keep the service running and secure (article 6(1)(f), legitimate interest). Nothing is sold, shared for marketing or used for profiling.

Who receives it

fastjira sends your data only to Atlassian, which handles it under its own privacy policy. Our servers are in Sweden.

How long we keep it

  • Disconnect, on the Jira connection page, deletes everything listed under What we store, for every device.
  • If you withdraw fastjira's access at Atlassian (id.atlassian.com, Account settings, Connected apps), we delete the same data the next time fastjira tries to use that access, which happens only while you are signed in. To have it deleted without that, email us.
  • Sign out ends the session in this browser only.
  • Email us and we delete everything we hold for your account within 30 days.

Your rights

Under the GDPR you may ask for a copy of your data, and have it corrected, deleted, restricted or handed over in a portable form, and you may object to how we use it: email lilleman@larvit.se. You may also complain to the Swedish Authority for Privacy Protection, IMY.

Changes

We update this page when what we store changes, and the date at the top says when it last did. See also the terms of use.