To create an account and sign you in, we collect your Torn API key and, using it, your Torn player name, ID, and faction membership. From there, depending on which parts of TornMaster you use, we may fetch and store additional data from Torn's API under your Torn ID - things like battlestats, energy and nerve activity, crime and racing history, book reads, and personal stats used to power the dashboard, faction tools, and progress tracking.
In full, here is every Torn API selection TornMaster requests, grouped by category:
Access levels are nested, so a Full Access key covers every selection above. A Limited Access key covers everything except ‘log’, which needs Full Access and backs the Progress section's energy, nerve, crime, and racing history reports, plus Crime Uniques tracking. A Minimal or Public key would also miss battlestats, money, bank balance/net worth/stock data, your faction's balance, and company applications/stock management. One selection, ‘auctionhouse’ (Buy/Sell's auction house stat), is currently broken on our end regardless of key tier - we're fixing it, and it never requested any data beyond what's described here in the meantime.
Your key is encrypted at rest using AES-256-GCM before it ever touches our database. It isn't logged, and it isn't shown to other users. If your key stops working (for example, if you rotate it in-game), we'll prompt you to enter a new one and stop using the old one.
This is the part we want to be upfront about. Some faction-wide features (Headquarters, the faction Member List, CPR Helper, faction crime tracking) are powered server-side by whichever faction member's stored key is currently valid - not necessarily your own. In other words, using TornMaster means your key may occasionally be used to fetch faction-wide data that other members of your faction see, in addition to fetching your own account's data. We never use your key to take any action in-game - everything TornMaster does is read-only.
We keep your data for as long as your account exists. You can delete your account and everything associated with it at any time from Settings - see below.
Go to Settings and use the “Delete account” option in the Danger zone. This immediately and permanently removes your profile, your stored API key, every saved preference, and the faction stat history synced under your Torn ID. It can't be undone.
Questions about this policy or your data? Reach us on Discord.