What TMS can and can't see
TMS reads Torn only through your own read-only API key. This page lists what that allows, what we keep, and who can see it. No login needed.
Permissions What we store Who sees what What we never do Delete your data Revoke your key
What your key lets TMS read
One key, created with the Create my key button, so you never tick boxes yourself. It is generated from the same list the login page uses, so it is always current.
Needed to log in
| Permission | Used for | Who sees it |
|---|---|---|
Basic user.basic | Your name, ID and level, read at login so we know who you are. Stored on your account. | You and leadership |
Faction user.faction | Which faction and position you hold, read at login to place you in the family. | You and leadership |
Faction members faction.members | Your faction's member list and last action, refreshed every few minutes for the activity dashboards. | Leadership, and the faction bot (member list) |
Used by TMS features (23)
| Permission | Used for | Who sees it |
|---|---|---|
Discord user.discord | Your linked Discord ID (only if you linked one in Torn), read at login so the faction bot can recognise you. | The faction bot only, to recognise you. No page shows it |
Personal stats user.personalstats | Your drug, crime and other counters, read hourly and once a day; stored as history for the dashboards, boards and the roster, and shown to you and to leadership according to their permissions. | You; leadership as their permissions allow; your faction only on leaderboards you opted into; the faction bot (counts) |
Activity log user.log | Only log category 62 (drugs) is read, about every 30 minutes and on My Hub; the raw entries are kept for 90 days and feed your drug history. | You; leadership as the Drugs permission allows |
Faction basic faction.basic | Your faction's name, tag and respect, read daily and for the war panel (public faction information). | Your faction and leadership (public Torn information) |
Faction crimes faction.crimes | Organized crimes and pass rates, read every 15 minutes by a leadership key (needs faction API access) and shown to leadership and the bot API as the OC permissions allow. | Leadership with the OC permission; the faction bot with an OC scope |
Faction wars faction.wars | Current and past wars, read hourly and by the war panel (public faction information). | Your faction (war panel) and leadership (public Torn information) |
Current chain faction.chain | Your faction's ongoing chain, read for the war panel and the faction history page. | Your faction (war panel) and leadership (public Torn information) |
Chain history faction.chains | Past chains (length, respect), read hourly for the faction history page. Optional. | Leadership with the Faction history permission (public Torn information) |
Ranked war history faction.rankedwars | Past ranked wars and their results, read hourly for the faction history page. Optional. | Leadership with the Faction history permission (public Torn information) |
Raid history faction.raids | Past raids, read hourly for the faction history page. Optional. | Leadership with the Faction history permission (public Torn information) |
Territory war history faction.territorywars | Past territory wars, read hourly for the faction history page. Optional. | Leadership with the Faction history permission (public Torn information) |
Faction stats faction.stats | Faction totals, read daily by a leadership key (needs faction API access) for the roster overview. | Leadership (roster overview) |
Faction contributors faction.contributors | Each member's gym energy, read daily by a leadership key (needs faction API access) for the roster; never sent to the bot API. | Leadership with the Battle stats permission. Never the faction bot |
Equipment user.equipment | Your equipped weapons and armor, read once a day from your own key and stored; only you and leadership with the Loadouts permission can see it, and it is never in the bot API. Optional. | You; leadership with the Loadouts permission. Never the faction bot |
Faction news faction.news | Joins, leaves and similar events, read hourly by a leadership key (needs faction API access) for faction history. | Leadership with the Faction history permission |
Your organized crime user.organizedcrimes | Your current organized crime, read when you open My Hub and kept for about a minute; only you see it. | Only you |
Bars user.bars | Your energy, nerve, happy and life bars, read when you open My Hub and kept for about a minute; only you see it. | Only you |
Cooldowns user.cooldowns | Your drug, booster and medical cooldowns, read when you open My Hub and kept for about a minute; only you see it. | Only you |
Refills user.refills | Whether your daily refills are used, read when you open My Hub and kept for about a minute; only you see it. | Only you |
Battle stats user.battlestats | Your four battle stats, read once a day from your own key and stored for your My Hub charts; only you and leadership with the Battle stats permission can see them, and they are never in the bot API. | You; leadership with the Battle stats permission. Never the faction bot |
Faction attacks faction.attacks | Your faction's attacks, read during wars by a leadership key (needs faction API access) for the war panel hit and respect counts. | Your faction (hit and respect counts in the war panel) |
Torn items torn.items | Public item names and stats, looked up for loadouts and cached for a week (public game data). | Everyone (public item data) |
Company profile company.profile | Directors only: read at login and on key checks to see whether you direct your company; only that yes/no is stored. | Nobody. Only a yes/no is kept, to know which permissions to expect from you |
Log categories 3, 62, 125 are requested; only 62 (drugs) is ever read.
Requested but not fetched (18)
In the key so a future feature needs no new key. Nothing is read or stored from these today.
| Permission | Used for | Who sees it |
|---|---|---|
Profile user.profile | Not fetched today: nothing in TMS reads your profile. | Nobody: not fetched |
Torn item details torn.itemdetails | Not fetched today: loadouts get item data from the Torn items selection instead. Optional. | Nobody: not fetched |
Money user.money | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Networth user.networth | Not fetched today; the networth on the roster comes from your personal stats instead. | Nobody: not fetched |
Your stocks user.stocks | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Property property.property | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Faction revives faction.revives | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Faction balance faction.balance | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Torn organized crimes torn.organizedcrimes | Not fetched today (public game data). | Nobody: not fetched |
Torn bank torn.bank | Not fetched today (public game data). | Nobody: not fetched |
Torn companies torn.companies | Not fetched today (public game data). | Nobody: not fetched |
Torn stocks torn.stocks | Not fetched today (public game data). | Nobody: not fetched |
Company snapshot company.snapshot | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Company list company.companies | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Company employees company.employees | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Company detailed company.detailed | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Company news company.news | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
Company stock company.stock | Not fetched today; nothing is read or stored from it. | Nobody: not fetched |
What we store, and for how long
| What | Details | Kept |
|---|---|---|
| Your API key | Encrypted with libsodium. Only the last 4 characters are kept readable, so you can recognise it. | Until you replace or remove it |
| Your account | Torn name and ID, level, faction and position, Discord ID (only if you linked one), which permissions your key has, login times, and a password hash if you set a password. | Until you remove your data |
| Login session | A cookie that keeps you logged in. | 7 days idle, 30 days at most |
| Activity samples | Online, idle or offline and last action, one sample every 5 minutes for each member. | 30 days, then rolled into daily and hourly summaries that are kept |
| Personal stat history | Torn's personal stat counters from your own key (drugs, crimes, attacks and so on), once a day. Extra snapshots in a day are thinned to one after 7 days. | Until you remove your data |
| Faction roster snapshot | The faction's own daily roster figures for each member (level, time played, attacks, gym totals and so on), read from public Torn data and the faction API. | Kept as faction history, also after you remove your data |
| Drug log entries | Only log category 62: which drug and when. | 90 days, or until you remove your data |
| My Hub live data | Bars, cooldowns, refills and your organized crime. Shown to you from a copy kept for a few minutes. | A few minutes; cache rows are cleared daily |
| Battle stats history | Your four battle stats, once a day. You can turn this off or delete the history on My Hub. | Until you delete it or remove your data |
| Loadout | Your equipped weapons and armor, once a day. | Until you remove your data |
| Map location | Your time zone and a point rounded to about 10 km, never your IP address. | Until you remove it |
| Your choices | Checklist items, leaderboard visibility, map visibility, Xanax target. | Until you change them or remove your data |
| Cache Simulator opens | Shown on the family feed and the share page, with your name. | Until you remove your data |
| Audit log | Logins, role and permission changes and key removals, with a hashed IP address (not the IP itself). Only the owner and family admins can read it. | Kept |
| Login attempt counter | A hashed IP address, to stop password guessing. | 15 minutes |
Who sees what
Leadership means the owner, family admins, and the admins and helpers of your faction. What they see is set per category in a permissions matrix, so it can differ between factions. Ordinary members see nothing of other members unless that member opted in.
| Data | You | Leadership | Your faction | Faction bot |
|---|---|---|---|---|
| Your API key | Nobody | Nobody | Nobody | Nobody |
| My Hub (checklist, bars, cooldowns, refills, organized crime) | Yes | No | No | No |
| Battle stats and loadout | Yes | Only with the Battle stats or Loadouts permission | No | Never |
| Activity (online status, last action, days in faction) | Yes | As their permissions allow | Only on the Active hours and Days in faction boards, if you opt in | With an activity scope |
| Drug, crime and OC counts | Yes | As their permissions allow | Only on the leaderboards, if you opt in | With the matching scope |
| Map location | Yes | Always (you cannot turn this off) | Only if you choose "My faction" or "Whole family" | Time zone only, no coordinates |
| Leaderboard rank | Yes | Always, per their permissions | Only if you choose "My faction" or "Whole family" | Only if you chose "Whole family" (or "My faction" for a token locked to your faction) |
The faction bot is the family's own Discord bot. It uses a token that leadership creates, limited to the scopes they choose.
What we never do
- We never ask for your Torn password. Logging in uses an API key; the optional TMS password is stored only as a hash.
- Your key is stored encrypted and never shown again, not even to you. No page, export or leader can read it.
- From your activity log we read only the drug entries. The other log categories in the key are never read.
- We don't sell or share your data. The only outside services are Torn's own API and public script libraries (cdnjs, jsDelivr). No ads, no analytics, no tracking cookies.
- We never look up your IP address for a location. Your map dot comes from your browser's time zone, or from a device position only if you allow it, rounded to about 10 km.
- The key is read-only. TMS cannot spend money, attack, trade or change anything on your Torn account.
TMS is an unofficial third-party tool and is not affiliated with Torn.
Delete your data
Log in, open My Hub → Account & Key → Remove my key & data.
- Deleted: your key, password, login sessions, roles, map location, checklist, battle stats history, loadouts, leaderboard choices, Cache Simulator opens and stats, your personal stat history and drug log copies, war claims and your API usage counters.
- Kept (the faction's own record of you, so its history stays complete):
- Roster row: name, level, position, last action and status, when you were last seen joining or leaving.
- Joins and leaves of the faction.
- Activity samples (online, idle or offline; a sample is stored when you are active or your status changes, and a tick log says which five-minute checks ran), until they are rolled up.
- Daily and hourly activity summaries.
- The faction's daily roster snapshots (level, time played, attacks, gym totals and so on).
- Organised crime history: which crime slot you filled and how it ended.
- Events the faction bot was told about (for example a join or leave).
- Bookkeeping of the roster sync (no stat values).
- Gym totals waiting to be merged into the roster snapshot (purged after 40 days).
- Bookkeeping of the public-stats sync (no stat values).
- Admin check runs that looked at your row.
- Logins, role changes and key removals, with a hashed IP address.
Revoke your key on Torn
You can stop TMS any time, even without logging in: open Torn → Preferences → API and delete the key titled TornManagementSoftware. TMS then can't read anything with it, and shows your key as invalid.