🔒 Privacy Policy — TornTrade

We collect minimal data and never sell it. Last updated: 15 August 2026.

What we collect

• Torn account data — username, player ID, level, faction. Fetched from the Torn API when you register and periodically refreshed.
• API key hash — a one-way HMAC hash of your key. We cannot recover your plaintext key from it.
• Listings you create — item, price, quantity, note.
• Reviews you leave or receive
• Session data — stored server-side, expires after 30 days of inactivity.
• IP address — stored temporarily with persistent sessions for security. Not shared.

What we don't collect

• Your plaintext API key (only a hash is stored)
• Payment information of any kind
• Any data beyond what's listed above

How we use it

Solely to operate TornTrade — authenticating you, showing your listings, displaying your profile, and sending watchlist alerts you've requested. We do not sell, rent, or share your data with third parties.

Data retention

Your data is kept while your account exists. You can delete your account from Settings, which permanently removes all associated data.

Cookies

We use one session cookie (for login) and, if you choose "remember me", one persistent token cookie. No tracking or analytics cookies.

Contact

Questions about your data? Reach out via the Discord server.

Last updated: 15 August 2026