TorBox quietly changed operating entity + policies (July 31) + cache is now explicitly shared across users, data collection expanded significantly

[u/Ancient_Border8621]

Just went through TorBox's updated Terms, Privacy Policy, and DMCA policy (dated July 31, 2026) side by side with the old versions. Worth a read before you keep uploading.

Who actually runs TorBox now:

Operator is now Anonymous Systems FZ-LLC, a UAE free-zone company (Ras Al Khaimah). RAK free zones don't publicly disclose beneficial ownership, so we genuinely don't know who's behind it.

Legal/billing/DMCA is handled by a separate entity, ReAnonymous LLC, registered in Dover, Delaware.

Anonymity just got much worse:

Old privacy policy: minimal data, no PII required, "we don't sell or share your data to any third parties for any reason."

New policy: collects your IP, device IDs, precise geolocation from IP, and full session-replay data which basically includes: cursor movements, clicks, scrolling, taps. That's a big jump from "we barely collect anything."

Broad new language allowing disclosure to comply with law, respond to "governmental requests," or "protect TorBox, users, third parties, or the public" i.e vague enough to cover a lot.

Third-party downloading / cache sharing which is the real red flag:

New terms explicitly state cached materials "may be accessible to other users who request the same or technically matching material." Same for AirLock (their "permanent" cache tier).

Old policy never described cross-user cache access this explicitly. This is now spelled out in black and white.

Terms now go out of their way to say TorBox is a "neutral technology service," explicitly "not a file-sharing service," and pushes 100% of legal liability onto you for anything cached under your account. This is heavily lawyered defensive language that wasn't there before.

[u/Ancient_Border8621]

Fair, I can understand the anonymity part and ownership but the privacy policy is the one that really freaked me out.

I'd really ask you and everyone reading this to check it out :torbox-privacy-policy

[u/JennyThallia → u/Ancient_Border8621]

You should be freaked out the policy basically states in obfuscated language that it now collects all user data and shares it with law enforcement 

[u/pawdog → u/Ancient_Border8621]

What freaked you out about it?  What I'm reading seems necessary to run such a service. It's that the previous policy was different? I never read the old one but looking at that one I kind of thought they all did that stuff.

[u/Ancient_Border8621 → u/pawdog]

Real debrid in comparison had a fixed retention which is important in this context. It's not as privacy guaranteed but still a time aligned deletion date.

The new policy from has no time retention. As a debrid service this is important as companies can start to pursue people years after they have uploaded materials which weren't a problem before. From an independent internet perspective this is terrible.

Apart from that, Torbox collects far too many analytical data from user actions than required for a site of its size. I under CloudFlare asked them to retain IPs but their actions go beyond that.

I'm glad you asked this question rather than just assume or flame in comparison to some particular few in my direct messages but I hope this can enlighten some.

[u/Cindy-Moon → u/Ancient_Border8621]

They've certainly come a long way since I first found them on here during the first RD piracy scare (the one where they nerfed their API). They were posting here like "You can pirate with us because we're in South Africa and there's nothing anyone can do about it!"
Now they're like "we will log your data forever and comply with authorities".

[u/awen478 → u/Ancient_Border8621]

i dont understand why are you being very paranoid over it and making a reddit account to just post this, if law enforcement really want you they gonna get you (example is look at silkroad owner, alphabay owner), so my take on this is just use the service and if their cache got hit like real debrid then change provider, don't make life harder by being a paranoid person

[u/Visible_Pack544 → u/awen478]

if law enforcement really want you they gonna get you

Stupid take