The Continental Terms & Privacy (Public Beta)

Torn API Usage Disclosure

Your Torn API key is used only for:

• Identity verification
• Optional evidence import (attack logs)

Key handling:

• The API key is submitted securely over HTTPS
• It is processed server-side only
• It is never stored in the database or browser storage
• It is never shared with third parties

Session behavior:

• The key exists only in memory for the duration of your session
• It is never stored; verification persists up to 30 days via HttpOnly session cookie until logout or expiry

Access level:

• Read-only access only
• No actions are performed on your Torn account

Data accessed only when you initiate import:

• Basic profile (player ID, name, level)
• Attack history (attacksfull)

The Continental never asks for your Torn password. Users may revoke or regenerate their API key at any time through Torn settings.

Public Access

• Browsing players and viewing profiles does not require an API key
• Submitting reports requires a verified Torn identity
• Imported evidence may be visible in reviewed case files when attached to a report

Privacy

• Reports and case details are user-submitted and manually reviewed
• Only verified cases affect public scoring
• Evidence links and case details may be visible to users of the app
• Users should not submit sensitive personal information

Public Beta Limitations

• Identity sessions are stored server-side and may expire
• Features and behavior may change during beta
• Admin actions are restricted during this phase

Final Notes

This is a reputation system based on verified events, not opinion.

Development is ongoing. Behavior and safeguards will continue to improve over time.