How Tornify handles your Torn API key and data.
| Topic | Details |
|---|---|
| Data Storage Will the data be stored for any purpose? | No. Tornify has no database and no user accounts. Data read from the Torn API is shown to you live and is never stored on our servers. Responses may be held in a short-lived in-memory cache (up to ~30 seconds) purely to avoid duplicate requests; it expires automatically and is isolated per user. |
| Data Sharing Who can access the data besides the end user? | No one. Your Torn data is fetched on your behalf and displayed only to you. It is never sold, shared with other users, or sent to any third party — with the sole exception of optional provider integrations you explicitly enable (see Key Storage & Sharing). |
| Purpose of Use What is the stored data being used for? | Solely to display your own Torn data back to you inside Tornify's features (e.g. profile, battle stats, travel and gym tools). Nothing is stored, so there is no secondary use. |
| Key Storage & Sharing Will the API key be stored securely and who can access it? | Your Torn API key is kept in a secure, httpOnly, same-site cookie (marked Secure in production). It stays server-side, is never exposed to the browser or JavaScript, and is never shared with other users or third parties. We never ask for your Torn password. If you connect an optional provider (e.g. TornStats), the key you enter for it is stored the same way and sent only to that provider to fetch your own data. Log out — or use Disconnect in Settings — to delete a stored key at any time. |
| Key Access Level What key access level or specific selections are required? | A read-only Limited Access key covers Tornify's current features (such as battle stats). A Public Only key works for public features but unlocks fewer. Tornify never needs Full Access. Each request is tagged “Tornify” in your Torn API log so you can verify exactly what was read. |
Tornify is an unofficial, fan-made helper for Torn and is not affiliated with or endorsed by Torn. Use of the Torn API is also governed by Torn's API Terms of Service, which take precedence over anything here.
We comply with Torn's scripting and rate-limit rules and request as little data as each feature needs. For abuse reports, takedown requests, or Torn staff inquiries, contact the developer by in-game Torn mail to yellowcube [4318657].