Privacy policy

Omni-Torn browser extension and server (omnitorn.duckdns.org). Last updated 26 October 2026 (Omni-Torn’s terms version 5: everything shared by default named, who reads bug reports, “Delete my data” everywhere). Torn’s terms table, shown wherever you give your key, is the short form of this page.

Omni-Torn is a set of tools for the browser game Torn (torn.com). It is made by the Torn player woyzer [2282863], who you can contact in game for any question about this policy or your data.

What Omni-Torn uses

• Your Torn API key. You give it on the extension's own options page. It is stored encrypted in your browser (the encryption key is made in your browser and can't be read out by any script). It is used to read your game data from the official Torn API (api.torn.com), always in a request header, never in a web address.
• The Torn pages you open. Omni-Torn reads the page you are looking at to add its tools to it. It never loads Torn pages by itself.
• Game data from the Torn API (prices, your bars and cooldowns, your faction, fights, players you look at), kept in your browser to show you the tools.

What reaches the Omni-Torn server

• Signing in. To prove who you are, your key (or a separate key you choose just for this) is sent to the server when you sign in and about once a month after that. The server asks Torn whose key it is and gives you a sign-in token with your Torn player ID, name and faction.
• Background tracking (on unless you switch it off): the server keeps the key you signed in with, encrypted (AES-256-GCM; the encryption secret is kept apart from the database), so it can keep your own data up to date when the website and the extension are closed: about once an hour your stats snapshot, every 15 minutes your new fights (Limited key or better) and activity log (Full key), and your faction share if you share. It reads only your own data with it, never shows or logs it, and never gives it to anyone. Switch tracking off (website → Account) or delete your data and the key is deleted from the server at once (signing out everywhere deletes it too, until you next sign in); a key Torn calls wrong, paused or disabled is wiped at once, everywhere. The server keeps it only after you've been told — on the website, on the extension's options page or in a notice on Torn.
• Faction tools: calls, rallies, med deals and MERC tallies you make, shared with signed-in members of your own faction (kept for hours to days).
• Faction sharing (part of using Omni-Torn, no switch — sign out to stop): your energy and other bars, drug / medical / booster cooldowns, unused refills, flights, status, battle stats total, loadout (the weapons and armor you have on, read from your own Items page) and organised-crime pass rates, shown only to signed-in members of your own faction using Omni-Torn and by the bot in your faction’s Discord servers (kept a day to a month). The faction data your key reads — your faction’s members, armory and crimes, and other factions’ member lists — is handed to your faction mates so they don’t each ask Torn (in memory, an hour). And what you learn about other players — the stat estimates you look up or work out (FF Scouter’s free estimates, TornStats spies you can see, estimates from your own fights), their revive setting and revive chance seen on a page you’re viewing, and their hospital/med times — goes to your faction mates using Omni-Torn (kept up to a week). This applies once you agreed to Omni-Torn’s terms (the table) at sign-in or in the one-time “terms changed” box.
• Loadouts of players you fight: the weapons and armor Torn’s attack page shows you go to every Omni-Torn user (a month).
• Anonymous pools (nothing that names you): the battle stats of players you fought (worked out from your fights), fair-fight readings and shop stock abroad (on by default, off any time), and your faction’s finished organised crimes — roles, pass rates and result, no players and no faction — from your Crimes tab and, once an hour, read with a faction-access key a member gave the Discord bot, to learn how much each role matters.
• Revive requests (only when you click): your Torn ID, name, faction and where you are go to the revive service you picked (its own rules apply; linked where you pick it), or to the revivers of your faction’s revive contract (minutes).
• Revive and MERC contracts between factions: who set one up and the players named in it, kept until it ends (at most 120 days); “Delete my data” removes the ones you set up and takes your name out of the others.
• Bug reports and suggestions (only when you send one): “🐞 Report a bug” and “💡 Suggest” on Torn's pages send what you write, with your name and ID, and — your choice in the form — a picture of the page, a cleaned copy of it (no scripts, form values, tokens or chat) and what Torn's page loaded, which can show other players. They are read by the Omni-Torn developer, on his computer, with an AI assistant helping. Kept 90 days on the server; “Delete my data” removes yours there and on the developer’s computer.
• Shop stock abroad (on by default): the stock of shops you view abroad (items, stock and prices — nothing about you) goes to other Omni-Torn users’ travel tables. Switch it off any time in Omni-Torn's settings (Travel → Travel extras).
• Your battle stats (read with a Limited key or better) are never shown to anyone — not even the owner — unless you share them with your faction. The server uses them, with your fights’ fair fights, to work out the battle stats of the players you fought (kept anonymously, nothing about you, for everyone’s estimates).
• History (unless you switch it off): about once an hour — in the background with tracking on, else while the website or the extension is open — a snapshot of your own numbers — level, personal stats, and with a Limited key or better your battle stats, networth and money — so the website can show changes and charts. Only you can see it (your sign-in). Hourly for a week, then one a day, for up to 400 days. Switching it off deletes it.
• Your choices: background tracking on or off, whether to keep a history, your Omni-Torn settings and lists, and which version of Omni-Torn’s terms you agreed to, so the website, the extension and Torn PDA follow the same ones.

Torn PDA

In Torn PDA (the Torn mobile app) Omni-Torn runs as a userscript. It uses the API key you gave Torn PDA, only after you sign in from its box (Torn's terms table is shown there); Omni-Torn doesn't copy it into its own storage on your phone (it uses Torn PDA's each time) — the server keeps it for your account as anywhere else (background tracking, above; on by default, off any time), keeps its other data in Torn PDA's own storage for scripts, and makes its requests through Torn PDA. Everything else on this page applies the same way.

Invite-only for now

Anyone can sign in and give their key, so their account is ready (background tracking, above). The extension's tools and the website's sections open only to players woyzer gives access to; until then, the extension, the website and the server use your key only to sign you in and keep your own data ready. (The Discord bot works in the Discord servers whose admins switched it on, with the key you give it there.)

One key for the extension, the website and the Discord bot

• A key you give in one of them — the extension, the website, or the Discord bot (/account) — is used by the others, for the uses you switch on, each shown with Torn’s terms table first, and what Omni-Torn reads at each key level: your account (background tracking, above, and signing in your other browsers with a code) and your faction (sharing with your faction mates, and the Discord alerts) (the bot reads your own faction’s data with it, for your faction’s Discord servers). A newer key replaces the older one for the uses you have on; never a stronger key with a weaker one.
• Keys are never lent to Omni-Torn or shared between players (volunteer and friends’ keys ended in v0.81.0; keys lent before were deleted, or kept for an account only when their owner said so).
• A code (from Discord’s /account connect, the website or the extension; 10 minutes, used once) signs another browser in with the key the server keeps for you — only for you: a Discord account Torn itself says is yours, or that gave the bot your key.
• Calls on your key: the Omni-Torn server at most 20 a minute (all its uses together), the Discord bot at most 13 (and one check when you give it a key), the website at most 20 in each open tab, and the extension at most what you set (up to Torn’s whole 100, in each browser). Torn allows 100 a minute across all your tools.
• Giving a key in Discord links your Discord account to the Torn account it belongs to (Torn says whose it is) — no player id is ever asked for.

The Omni-Torn website

• Nothing on the website works until you sign in with a Torn API key — or, with the extension installed and signed in, through the extension (then the key stays in the extension and the website never sees it).
• A key typed on the website stays in your browser, encrypted the same way as in the extension; the website asks the Torn API directly from your browser. It reaches the Omni-Torn server when you sign in, and is kept there (encrypted) for background tracking as above, unless you switch that off.
• What the website shows you — your bars, cooldowns, money, stats, fights, logs — is only shown to you. What background tracking keeps — history (400 days), fights (a year), activity log (90 days) — is readable only with your own sign-in.
• The only things about you others can see are what you share with your own faction (faction sharing, above — part of using Omni-Torn) and, for every Omni-Torn user, the loadouts of players you fight.

Other services

Some features use other Torn tools, only when you use those features: TornStats, FF Scouter, KAL and S&R (with keys you give for them, or your Torn key for FF Scouter and KAL if you connect them without one), and weav3r.dev, tornprobability.com (OC role weights), Loot Rangers (lzpt.io, NPC attack times) and the Torn wiki (no key, nothing of yours sent). The crimes on your Crimes tab (scenario and each seat’s pass rate, no names) go to tornprobability.com for their success chance — on by default, off any time. Sending your fights to S&R and your faction’s completed crimes to tornprobability.com (roles instead of names) are opt-in. Each service has its own terms, linked next to its switch: FF Scouter (the Terms and Conditions on ffscouter.com and its privacy policy), TornStats (tornstats.com/tos), KAL (kalends.dev/api-policy), S&R (lordrhino.co.uk/terms), tornprobability.com and the revive services (their own rules). S&R gets only the Public key you make for it, in the web address, as its API asks. The stock abroad comes from the Omni-Torn server itself.

What Omni-Torn never does

• It never sells or shares your data for advertising, and has no ads or analytics.
• It never sends your key to anyone but the Torn API, the Omni-Torn server and Discord bot (for the uses above), your own browsers (when you connect one with your code) and the tools you connect yourself. It is never shown, logged, sold or given to anyone else.
• It never sends requests to torn.com by itself; anything that acts in the game happens only on your own click.

Your choices

• Sign out on the extension's options page: your key is removed from your browser, and the server refuses every sign-in token you had (on all your devices).
• Delete your API key on Torn (Settings → API Keys) at any time to stop all use of it.
• Removing the extension deletes everything it kept in your browser.
• “Remove my key everywhere” (website Account, extension options, or /account remove in Discord) removes your key from every use at once: your account and your faction.
• “Delete my data” — on the website (Account), in the extension (options → Account), in Torn PDA (Torn’s Settings → API Keys) or in Discord (/account delete) — deletes at once everything the server keeps of yours: your key everywhere, your history, kept fights and log, your synced settings, lists and notes, what you share with your faction (your entry, pass rates, calls, loadouts, faction data you sent), your revive requests, your bug reports and suggestions (on the server and the developer’s computer), and the Discord bot’s link of your Discord to your Torn account; tracking and history stay off. Your fair-fight readings stay in the anonymous pool without your id. For anything else, contact woyzer in game.