| Verified Torn ID/name and group policy are stored locally. Optional faction snapshot, role, token and expiry are in server memory. Valid for 15 minutes; expired records are removed on lookup/new login or restart. | Local host administrators can access stored data. Cloudflare terminates browser HTTPS when using the tunnel. The app sends the key to Torn over HTTPS. | Verify identity and membership. Optionally display faction basics and roster fields readable with your key. | Not written to disk, logs or reports. Held while verifying; a rejected-key fingerprint may remain in process memory. | user/basic for your key, plus optional faction/basic and faction/members. Server key reads user/basic and faction/members. Three login reads plus up to two optional overview reads using your own key. Retries may add requests. |