Privacy policy

Effective October 28, 2026. Version 1.0.

Wingman, powered by myGIGlife INC. ("we", "us") runs this website and the Wingman app. This page says what we collect, why, who sees it, and how you delete it.

What we collect

On this website

• Test sign-up: the email address you type in the form, and the time you sent it. We keep it until the test ends, or until you ask us to remove it.
• Hosting logs: our website host (Cloudflare) and our server host (Google Cloud) see your IP address and browser details when you load a page or send the form. They keep ordinary request logs for security and operation.
• This site sets no cookies and uses no ad or analytics trackers.

In the app and on our server

• Your Torn API key. The app uses it to read your Torn data. We store it encrypted (AES-256-GCM). It is only sent to api.torn.com, over HTTPS, and never shown to other users. Use a Limited access key.
• Your Torn player ID and name, taken from Torn when you sign up.
• Data read from the Torn API to build your widget and alerts: bars, cooldowns, travel and location, money on hand, organized crime status, your Targets list, and addiction and drug counts. We keep the latest state we need to work out your next alert, not a long history.
• Your settings (destination, item, alert switches, time zone, and similar).
• Your phone push token from Firebase Cloud Messaging, so we can send alerts to your device.
• Your FF Scouter key, only if you choose to add one. It is stored encrypted and sent only to ffscouter.com.

Why we use it

Only to run Wingman: to read your Torn data, work out timings, send alerts to your phone, and keep your account working. We do not use it for advertising and do not build profiles about you.

Who it goes to

• Torn (api.torn.com): your API key and the requests we make with it.
• Google (Google Cloud and Firebase, United States): runs our server and database, and delivers push alerts.
• Cloudflare: hosts this website.
• FF Scouter (ffscouter.com): your FF Scouter key and target requests, only if you turn that feature on.
• YATA (yata.yt): we fetch public shop stock from it. No personal data about you is sent.

We do not sell your personal information and do not share it for advertising.

How long we keep it

Account data stays until you delete your account. Test sign-up emails stay until the test ends or you ask us to remove them. Server logs are kept for the period set by Google Cloud, which is 30 days by default. Deleted data can remain in backups for a short time before it ages out.

Your choices

• Delete your account: email us and we will remove your key, settings, state and device tokens from our database within 30 days.
• Revoke your Torn key any time in Torn. Wingman stops working for you at once.
• Ask for a copy, a correction, or removal of your data by emailing us. We will answer within 30 days.

Security

Connections use HTTPS. Torn and FF Scouter keys are encrypted before they are stored. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

Children

Wingman is not meant for children under 13, and we do not knowingly collect their data. If you think a child gave us data, email us and we will delete it.

Changes

If we change this policy in a way that matters, we will update the date above and tell test users by email before the change takes effect.

Contact