Key and data policy
What faction.tools stores, who sees it, and why.
- Data storage
- Persistent. Your Torn id, name, faction and your API key (encrypted), plus the faction data the tools need, such as war reports, the armory log and payouts.
- Data sharing
- Only inside your faction, and only what your role allows. Your key is never shown to anyone, leaders included, and is never sold or given to anyone.
- Purpose of use
- Faction tools for Toxic Reign: wars, payouts, chains, the armory, organized crimes and alerts.
- Key storage and sharing
- Encrypted at rest (AES-256-GCM) and only ever sent over HTTPS. Your key joins the faction's shared key pool, which spreads requests across members' keys so nobody's key is overused.
- Key access level
- A custom key from our sign-in link (only the selections we use) is recommended. Limited Access also works.
Our promises
- Your key is never shown on the site to anyone, leaders included.
- Your key is never sold, shared or handed to another service, unless you choose to connect FFScouter, which then receives it to register you.
- Pooled requests on your key are capped at 20 a minute, well under Torn's limit of 100.
- Delete the key in Torn (Settings, API keys) and the site stops using it straight away.
Tool by tool
- Signing in
- Your key checks who you are and your faction, and every few hours checks its access level. Your name, faction and the encrypted key are stored.
- Hit list and war room
- While someone has the page open, the enemy roster is read every few seconds through the pool (one read shared by everyone). Calls and stars are stored for the war. FFScouter estimates come with your own FFScouter key only, and are never stored or shown to anyone else. Our own estimates (worked out from the fair fight of members' hits) and rank ranges are faction data every member can see.
- Battle score
- Your battle stats are read only with your own key and never shown to anyone. Only one combined score is stored, used to work out rounded estimates of enemies you hit.
- Spies
- Spies members paste (from Torn or TornStats) are stored with the player, the stats, the spy date and who added it. Every member of the faction can see them, on the spies page, the hit list and each player's card. The member who added a spy, or a leader, can delete it. The player card also reads that player's public personal stats through the pool, and your own Xanax, refill, energy drink and stat enhancer counts with your own key, shown only to you.
- War reports
- After a war, its attack log is read once through the pool and stored. Every member can see the report.
- Payouts
- Leaders build payout plans from the stored war data, the faction's Xanax use from the armory log, every attack each member made from 72 hours before the war to its end, and our chain reports (both read once per war). While a leader is paying out, the faction balance is read every 10 seconds. Leaders see every member's payout; other members see only their own.
- Chains
- Our chain status is read once a minute, and every few seconds while a chain runs. Finished chain reports, ours and those of factions you scout, are stored. Our faction's attack log (who hit whom, the result, respect and fair fight, both ways) is read through the pool every 2 minutes, every 15 seconds during a chain, and kept for 120 days. It shows who just hit us on the chain page and feeds our own estimates. Every member can see it.
- Chain targets
- A shared list of players to hit on chains, started from public lists of inactive players and grown from our attack log, lists members import and a slow background sweep of small factions (public data, at most 1 call a minute and 300 a day through the pool). Their status is read through the pool while someone has the board open. Your own Torn target list is read with your own key only when you press Share my Torn targets. Every member can see the list; the member who added a player, or a leader, can remove them.
- Armory audit
- When a leader opens it, our faction news (armory use, deposits, vault and balance changes, membership) is synced through the pool, at most 8 requests a minute per key, and the last 90 days are kept. Leaders see every member's record; other members see only their own.
- Roster, activity and energy
- Our roster is sampled every 5 minutes to build activity history. Leaders, and members they grant access, see each linked member's energy and nerve, read with that member's own key.
- Organized crimes
- Your own key reads your OC view about every 30 minutes, to store your success rate for each open role and whether you hold its item. Faction members can see these rates in the OC planner.
- Scouting and applications
- Public data about other factions and players (rosters, rank, level, public personal stats such as Xanax taken, crimes and networth) is read through the pool, refreshed at most every 12 hours, and stored. Applicants' public profiles are read when a leader opens applications.
- Alerts and Discord
- Faction alerts (chain, war, enemy activity, large vault withdrawals) can be posted to Discord channels leaders connect. Alerts never include keys.
- Calendar
- Events and requests your faction adds are stored with who asked and who approved. Every member sees approved events; requests are seen only by their requester and leaders. Your private calendar link only shows approved events, and resetting it stops the old link working.