Does ShadowCore HQ sell user data?

No. ShadowCore HQ does not sell user data.

How are Torn API keys used?

Torn API keys are used to request data needed for ShadowCore HQ tools. Session-based keys are intended to stay in the browser session unless a specific feature says otherwise.

Can users clear their ShadowCore session?

Yes. Users can log out or clear browser storage to remove local/session keys and locally stored history from that browser.

Home / Privacy

Privacy and API key policy

How ShadowCore HQ handles Torn API keys, browser sessions, and faction data.

This page explains the practical privacy approach behind ShadowCore HQ: what the tool uses, why it uses it, what may be stored, and how members can clear local browser data.

Open ShadowCore HQ About ShadowCore Faction tools

Plain-language privacy summary

ShadowCore HQ does not sell user data. The app exists to help Torn faction members and officers view their own faction operations data more clearly. API data is used to power dashboards such as personal status, member readiness, ranked war tools, recruiting, banking, armory tracking, activity analytics, and history snapshots.

ShadowCore HQ is a community-built toolset and is not affiliated with, endorsed by, or operated by Torn Ltd.

What data may be used

Torn API data

Depending on the page, ShadowCore HQ may request Torn profile, faction, member, chain, ranked war, personal, armory, banking, or activity-related data needed for the selected tool.

Browser session keys

Member API keys are intended to be used from the current browser session where possible. Session keys can be cleared by logging out or clearing browser storage.

Local history

Some history and snapshot features use browser localStorage so data can survive refreshes on the same device.

Server storage

Some shared faction features may use backend storage for operational rows, audit context, reports, prospects, guides, activity snapshots, and other faction workflows.

Torn API key handling

ShadowCore HQ uses Torn API keys to request data from Torn for the tools a user opens. The app is designed to prefer browser/session-based keys for member-specific actions where possible. Some shared faction workflows may rely on a configured server key or verified member session depending on the feature.

Members should only use API keys they are allowed to use, and should review Torn API permissions before entering a key into any third-party tool. If a member wants to clear local access, they can use the logout button in the ShadowCore navigation and clear site data in the browser.

What ShadowCore HQ does not do

It does not sell user data.
It does not claim to be an official Torn product.
It does not replace Torn account security settings.
It does not remove the need for faction leadership to review permissions, payouts, armory access, and API key usage.

FAQ

How do I clear my ShadowCore browser session?

Use the ShadowCore logout button, then refresh. You can also clear site data for shadowcore.app in your browser settings.

Is local history shared across devices?

Browser localStorage history stays on that device unless a sync feature is used and available for your login.

Should I use a limited Torn API key?

Using only the permissions needed for a tool is a good security habit. Review your Torn API key permissions before using any third-party tool.