Terms & data policy

What Torn Atlas does with your API key and your data, in plain language - required reading before you connect an account, and required by Torn's own API rules for any third-party tool.

Required API access level

Limited Access is all Torn Atlas needs. Your stats, net worth, crimes, education and travel tracking all work on a Limited key. The one thing Torn doesn't allow a Limited key to do is read your activity log, so purchases made abroad aren't detected automatically - you log what you bought yourself with the "Log what you bought" button on the Travel page. We don't ask for a Full Access key: it would grant far more than this tool needs.

What's stored, by whom, for how long

Data	Stored where / how long	Who can access it	What it's used for	Security
Shared Torn data item market prices, stock prices, education courses, abroad stock (YATA)	Server-side, refreshed continuously in the background, kept indefinitely as price/stock history	Public - shown to every visitor, logged in or not	Powers Market, Stock market, Suggested Buys, and the swing/investment calculators for everyone	Fetched using the site operator's own API key - not yours. This data is the same for every player; it was never tied to any individual account
Your personal account data vitals, stats, net worth, travel, crimes, education progress, Flipping trades	Stored persistently only in your own browser (the Torn Atlas extension's local storage). Loading a page here that shows this data does send it to this server for that one request - see "Security" - but it is never written to this server's database, never logged, and never kept after the response is sent	Only you. This server's memory holds it for the few milliseconds it takes to render your page, then discards it - the site operator has no separate copy or way to retrieve it afterward	Displaying your own dashboard, history, and planner back to you	Your API key itself is sent only to Torn's own official API, straight from your browser - never to this server, never to any third party. Only the already-fetched results (stats/vitals/etc, not the key) are sent to this server, once per page load, purely to render that page

What we will never do

Never ask for your Torn password - only your API key
Never use your key for anything other than what's described on this page
Never sell, share, or advertise using your data
Never store a Full Access key's worth of trust when Limited Access does the job

Questions

Contact: Skiffy [4207971]