Privacy.

tora.im keeps authentication delegated to Turnkey and routes private service checks through server-side endpoints. Secrets are not exposed in browser APIs.