Privacy Policy

You can browse prices without an account or an API key. We use PostHog for privacy-conscious product analytics and error tracking: it records pages viewed, actions taken, performance, errors, and technical details such as browser, device and an approximate location derived from your IP address. We use this only to understand usage and improve the Service. Your browser also stores small preferences locally (for example a remembered filter or an unsent draft); these stay in your browser.

Some features let you connect your Torn account with a read-only Limited Access key. We use the key to fetch your profile and items and then discard it — the key is not stored on our servers for ordinary use (a few in-browser tools keep it in your browser tab only until you close it).

If you leave “Count my Torn trades on the leaderboards” ticked when connecting, the same key is also used once to read your last 20 finished Torn trades (who traded, items and cash). We store those trades as Torn-verified so they count in your trade history and on the public leaderboards (names and trade counts). The key is still discarded afterwards. Untick the box to skip this.

The optional profit Ledger can read your trade logs and needs a key with log access. Its key is only kept if you turn on background sync, in which case it is stored encrypted (AES-256-GCM) and you can delete it at any time. Once connected, we store your Torn profile, your synced inventory, any buy list or listings you publish, your optional ledger, and reviews and completed-trade confirmations tied to your account.

• Public: only what you choose to publish — your buy list, your listings and your bazaar offers, plus reviews you receive.
• Private: your API keys, your synced inventory and your ledger are not shown to other users.

When the bot is used, we store only what it needs to work:

• The server (guild) ID and name, the channel IDs an administrator configures for the deals feed or daily post, those feed settings, and the Discord user ID of the administrator who set it up.
• The bot needs no API key from you or your members. Command results come from public Torn data.
• When you use the “Price check” action on a message, the bot reads that one message only to find item names in it, and processes it in memory to reply — it is not stored. The bot does not read or log your server’s other messages.

The Service relies on: the Torn public API (market and game data), Discord (for the bot), the analytics provider PostHog, and our hosting provider Render. These providers process data under their own terms as needed to deliver the Service. We do not sell your data to anyone.

Account data is kept while your account exists. You can delete your data: remove your stored ledger key and data from the ledger settings at any time, or ask us to delete your account and the data tied to it by messaging YoyoTradeHub [2865589]. A server administrator can turn the bot off with /setup off or remove it from the server, which stops new data being stored for that server.

The Service is served over HTTPS, stored API keys are encrypted, and keys used for one-off syncs are discarded rather than saved. No online service can be guaranteed perfectly secure, but we aim to keep what we hold to the minimum needed and to protect it.

The Service is intended for Torn players and is not directed at children under 13. Please use Torn and Discord in line with their own minimum-age requirements.

We may update this policy; the “last updated” date above will change. For any privacy question or request, message YoyoTradeHub [2865589] in Torn or reply on the official forum thread.