Privacy Policy

1 Who we are

Torning ("Torning", "we", "us") is operated by the Torn player liharris30 [2106022] and is the data controller for the personal data described in this policy. Torning is an independent tool and is not affiliated with Torn. This policy applies to everyone who uses the website, the Discord bot, the userscripts, the browser extension or the Torning API, wherever they are in the world.

You can contact us about anything in this policy on the Torning Discord or by messaging liharris30 [2106022] in Torn.

2 Data we collect about you

Account data. When you sign in we collect:

• your Torn player ID, name, level, faction and country, read from Torn;
• your Torn API key, which is encrypted at rest and only ever shown as its last four characters;
• your key's access level, your timezone, your settings and visibility choices, and whether and when you accepted our Terms and this policy;
• API tokens issued to your userscripts and browser extension.

Baseline game data. While your key is on file we read your bars (such as energy, nerve and happy), cooldowns and equipped items, which the Service needs to work.

Opt-in feature data. Only after you turn a feature on, we read the data it needs, which may include:

• battle stats and gym gains (Battle Stats Insights);
• stock holdings, transactions, bank investments and networth (Stocks Portfolio and Stocks Insights);
• item market, bazaar and trade history (Trade Movements);
• merits, honors and awards (Honors and Awards, which is on by default and can be turned off);
• Torn log entries in selected categories such as money, casino and attacking (Income Insights);
• daily activity and company data (Daily Checklist);
• the conditions you choose to be alerted about (Personal Alerts).

Faction data. If your faction leaders enrol your faction, we read faction data that includes you, such as membership, faction news, organised crimes and your crime role rates, ranked wars, attacks, chains, armoury loans, your faction balance, applications, contributions, revives and activity counters from your personal stats.

Pro and Ultra payments. If you pay for Pro or Ultra, we record the sender, the number of Xanax, the time and the tier your message chose for payments sent to liharris30 [2106022]. If the payment is a gift, we also record the player it is for, and each of you can see the other's name beside it. When your account starts its free welcome trial, we record your Torn player ID and the date, and keep that record after you delete your account so the trial is given once per player.

Discord data. If you use the Discord bot, we store your Discord user ID and username (taken from the Discord link in your Torn profile), the servers and roles linked to your faction, your alerts and watches, and a record of the messages the bot sends.

Content you submit. Guides, images, ratings, stars, spy reports, CSV imports, payout settings and anything else you enter into the Service.

Technical data. Your IP address and browser user agent (stored with your session), a log of each Torn API call made with your key, the cookies described in section 11, and privacy-friendly usage analytics.

3 Data about other players

To provide faction, war, racing and intelligence tools, Torning stores public or faction-visible Torn data about players who may not use Torning. This includes public profile details (name, ID, level, faction, status and last action), faction membership, ranked war and attack records, race results, battle stat estimates from YATA, and spy reports submitted by users. We process this data on the basis of our legitimate interest in providing game tools to Torn players. If you are one of these players you may object at any time using the contact details in section 17.

This also covers records your own faction keeps about you as a member, such as attacks, contributions, armoury and ledger entries. They are keyed by your Torn player ID, not by your Torning account, so deleting your Torning account does not delete them. They are deleted when your faction's data is wiped, 30 days after it un-enrols, or on request.

4 How we use your data and our lawful bases

Under the UK GDPR and the EU GDPR we must have a lawful basis for each use of personal data. We rely on the following:

We do not sell or rent your personal data, and we do not use it for advertising.

5 Consent and how to withdraw it

Each opt-in feature has its own page where you grant consent. When you revoke a feature, Torning stops fetching new data for it. Data already collected is kept until you delete your account from Privacy & data , as described in section 12. You can stop all fetching at any time by deleting your API key in Torn's preferences.

6 Who can see your data

• Your visibility settings (Private, Leaders, Faction or Public) control what other players see of your insights and rankings.
• Faction leaders and members can see faction data according to their faction role and the modules their leaders enable.
• Spy reports are visible to you, and to your faction if you choose to share them or if they belong to the faction.
• Discord servers linked to your faction can see bot replies, alerts and role or nickname changes posted there.
• Torning publishes platform-wide totals on its public Stats page, such as the combined networth of players who use Networth insights. Each figure adds up at least ten players and never shows anyone's own numbers.
• Torning administrators can access account data to operate, support and secure the Service.

7 Third parties we share data with

We may also disclose data if required by law, to protect the rights, safety or property of Torning or others, or to a successor if the Service is transferred.

8 International transfers

Torning is hosted in the United Kingdom. Some of the third parties listed in section 7, such as Torn and Discord, process data in other countries, including the United States. Where personal data leaves the UK or the EEA, we rely on adequacy regulations, appropriate safeguards offered by the recipient, or the transfer being necessary to provide the service you asked for.

9 How long we keep data

The same catalogue that builds your data export sets these periods, so what you read here is what runs each night. Your Privacy & data page shows them beside live counts of what we hold about you.

10 Security

API keys are encrypted at rest, traffic is served over HTTPS, access to data is restricted by role, and API calls are rate limited well below Torn's limits. No system is completely secure. If a breach is likely to put your rights at risk, we will notify you and the relevant authority as the law requires.

11 Cookies and local storage

12 Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our use of your data, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing that happened before;
• if you are a California resident, know what we collect, delete or correct it, and not be discriminated against for using your rights. We do not sell or share personal information as those terms are defined in the CCPA;
• any other rights given to you by the data protection law of your country.

To receive a copy of your data or to delete your account, use Privacy & data in your Account settings. Exports are encrypted with a password you choose and are usually ready within minutes. For any other right, contact us on the Torning Discord or message liharris30 [2106022] in Torn. We verify requests against the Torn account linked to your Torning account and respond within one month, which may be extended where the law allows.

Deleting your account erases everything under Account & access, Consents & keys, Your Torn snapshot, Insights & history, Discord, Content you made, Technical, apart from your public Torn profile. Records your faction keeps about you, such as attacks, contributions, armoury and ledger entries, are keyed by your Torn player ID and stay under legitimate interest until the faction's data is wiped 30 days after it un-enrols, or until you ask for them to be removed. Actions you took as a leader stay in your faction's books with your account reference blanked. A record that your Torn player ID has had the free welcome trial is kept, so signing up again does not start another. The Privacy & data page lists every category we hold with whether deletion erases or keeps it.

13 Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority in the country where you live or work.

14 Children

Torning is intended for players who meet Torn's own age requirements. We do not knowingly collect personal data from children below the age of digital consent in their country without the consent of a parent or guardian. If you believe we have, contact us and we will delete it.

15 Automated decision-making

Torning calculates things like payouts, organised crime plans, rankings and battle stat estimates. These are advisory and do not produce legal or similarly significant effects on you, so we do not carry out automated decision-making of that kind.

16 Changes to this policy

We may update this policy. When we make a material change, we will raise the version number and ask you to accept the new policy before you continue using the Service. Until you do, background syncing of your personal data pauses.

17 Contact

Questions, requests and complaints about this policy go to the Torning Discord , or to liharris30 [2106022] in Torn.