🔒 API & PRIVACY POLICY

1. Torn API Usage

This service uses the official Torn Public API (api.torn.com) to retrieve real-time and historical game data. By connecting your Torn account you explicitly authorise us to make requests on your behalf using the API key you provide.

Data We Retrieve

• User profile: Name, level, faction membership, status (Okay/Hospital/Traveling/Abroad).
• Battle stats: Strength, speed, defense, dexterity — only when you trigger a manual sync from the personal stats page.
• Personal stats: Attacks won/lost, hospital sends, nerve usage, xanax/refill counts, war score, and other in-game metrics used for leaderboards and personal dashboards.
• Faction data: Member roster, chain progress, war scores, OC (Organised Crime) assignments, armory inventory, and ranked war reports — retrieved using the faction AA permissions.
• Crime data: OC slot assignments and success/failure history for planning purposes.
• Market & economy: Points market price and faction bank balance, used for finance dashboards.

How We Use Your Key

• Your key is used solely for the purposes described above. It is never forwarded to third-party services.
• Automated background tasks append the comment parameter CmdCtr to API calls, making our usage identifiable in your Torn API log.
• Keys from multiple faction members are pooled so the total request rate stays within Torn's published limits. Your key contributes to, but is not the sole source of, faction-level data pulls.
• You can revoke access at any time by changing or deleting your Torn API key. We will purge your stored key from our database upon account deletion.

2. Third-Party Services & Credits

The following external services are integrated into Torn Command Center. Thank you to each service below. This is how your data may interact with them.

Frontend Libraries (CDN)

The following open-source libraries are loaded from public CDNs. No personal data is transmitted as part of these requests — they are standard static asset loads:

CDN requests may cause your browser's IP address to be logged by jsDelivr and Quill's CDN providers, subject to their respective privacy policies.

3. Data Sharing & Visibility

Your data is shared only within the contexts described below. We do not sell, trade, or broker personal data.

• Your Faction Leadership: Faction commanders and staff can view your active status, hospital timer, travel destination, chain contributions, OC assignments, and war hits through the tactical dashboards.
• Discord Servers: If your faction administrator connects our Discord Bot, automated messages (e.g. retaliation alerts, flight updates, bank requests) may be broadcast to configured Discord channels. The content and frequency of these broadcasts is controlled by your faction admins.
• The Service Owner (Acayib): Strictly for server maintenance, debugging, and infrastructure improvements. The owner does not access individual member data beyond what is necessary to resolve technical issues.
• Enemy intel: When war intel features are active, enemy faction members' in-game public data (status, level, last action) is displayed to your faction's commanders. This data originates from Torn's API and reflects publicly available game information.

4. API Key Security

• Secure storage: Your Torn API key is stored in our database and is not accessible through the web UI after login.
• No plaintext exposure: Once submitted, your key is never displayed in plaintext — not in the UI, not in Discord, not in log files.
• Scoped usage: Your key is used only to pull data for your faction's dashboards. It is never forwarded to FFScouter or any other third-party service.
• Revocation: Revoking or changing your Torn API key immediately invalidates our ability to make further requests. You can additionally request account deletion to purge all stored data.

5. Data Storage & Retention

Data retrieved from the Torn API is stored persistently in our database to power historical analytics (leaderboards, activity heatmaps, war debriefs, personal stat trends). The following retention rules apply:

• API keys: Retained until account deletion or manual revocation.
• Player stats & personal history: Retained while you remain a registered user. Purged on account deletion.
• Enemy intel cache: Updated in real-time during active wars. Historical records (attack logs) are retained for faction-level post-war analysis.
• Activity logs / heatmaps: Rolling 7-day activity data used to generate heatmaps. Older data is aggregated and anonymised.
• Discord messages: We do not store the content of Discord messages sent by our bot. We store only the configuration (channel IDs, role IDs) needed to deliver them.

6. Torn API Compliance

This service is built in compliance with the Torn API Documentation and Terms. Specifically:

• Not affiliated: We are an independent third-party application. We are not affiliated with, endorsed by, or sponsored by Torn Ltd.
• Rate limiting: Faction API keys are pooled and requests are batched and cached server-side to stay within published rate limits. We do not hammer the API with redundant requests.
• Usage comments: Automated background calls include the ?comment=CmdCtr parameter, making our usage visible and identifiable in your Torn API log.
• No web scraping: We use only the official public API. We do not scrape torn.com HTML pages.
• Key access requirement: We require Limited access or higher. Features that read logs require Full Access. We do not request or store Torn API keys with unnecessary permissions.
• No harmful use: We do not use API data to harass, dox, or harm players, or to disrupt Torn Ltd's services.
• User consent: API keys are submitted voluntarily by users. We do not obtain keys through any automated, deceptive, or unauthorised means.

7. Your Rights & Contact

You have the right to:

• Access: Request a summary of what data we hold about you.
• Deletion: Request deletion of your account and all associated data, including your stored API key.
• Revocation: Revoke access at any time by changing your Torn API key in your Torn settings. This immediately halts any further data collection on our end.

To exercise these rights, contact the service owner Acayib directly via Torn in-game message or the faction Discord.