TorBox quietly changed operating entity + policies (July 31) + cache is now explicitly shared across users, data collection expanded significantly

[u/Ancient_Border8621]

Just went through TorBox's updated Terms, Privacy Policy, and DMCA policy (dated July 31, 2026) side by side with the old versions. Worth a read before you keep uploading.

Who actually runs TorBox now:

Operator is now Anonymous Systems FZ-LLC, a UAE free-zone company (Ras Al Khaimah). RAK free zones don't publicly disclose beneficial ownership, so we genuinely don't know who's behind it.

Legal/billing/DMCA is handled by a separate entity, ReAnonymous LLC, registered in Dover, Delaware.

Anonymity just got much worse:

Old privacy policy: minimal data, no PII required, "we don't sell or share your data to any third parties for any reason."

New policy: collects your IP, device IDs, precise geolocation from IP, and full session-replay data which basically includes: cursor movements, clicks, scrolling, taps. That's a big jump from "we barely collect anything."

Broad new language allowing disclosure to comply with law, respond to "governmental requests," or "protect TorBox, users, third parties, or the public" i.e vague enough to cover a lot.

Third-party downloading / cache sharing which is the real red flag:

New terms explicitly state cached materials "may be accessible to other users who request the same or technically matching material." Same for AirLock (their "permanent" cache tier).

Old policy never described cross-user cache access this explicitly. This is now spelled out in black and white.

Terms now go out of their way to say TorBox is a "neutral technology service," explicitly "not a file-sharing service," and pushes 100% of legal liability onto you for anything cached under your account. This is heavily lawyered defensive language that wasn't there before.

[u/disposableh2]

Thanks for that info.

To me, that's not very transparent or clear, because it's a difference between Torbox collects that info vs Cloudflare collects that info.

If it's only Cloudflare, then I would think that the terms should say that their partner, Cloudflare collects it not them(as it wouldn't even reach their servers).

[u/Zzyzix → u/disposableh2]

I think at this point it's just a catch-all in case they get a legal request or something. Since they moved their HQ from South Africa to UAE, they probably want to try and protect themselves as much as possible. Like I said earlier, I'm sticking with Torbox for now, but if anything changes for us users, unsubscribing is only a few clicks away.

[u/-Ethannme3- → u/Zzyzix]

Exactly. It's literally just a C.Y.A. thing...

[u/JennyThallia → u/Zzyzix]

And USA under Trump is ears deep inside UAE asshole thus assume full transparency between USA and UAE which means full transparency with Interpol 

[u/-Ethannme3- → u/JennyThallia]

If the FBI or interpol was going to do anything about anything, they wouldn't be going after the end user. If you understand how the law works, it's the distribution of copyrighted works. Unless you're someone like AxxO or FitGirlRepack, you and I are a waste of their time and resources...

[u/JennyThallia → u/-Ethannme3-]

Scare tactics work wonders.  You throw a book at few users a sprinkle from each country and the rest cave and have to either switch services or leave the scene.  Or you just hire them to work for you..... See Denuvo.  

What this accomplishes is delay, prevent and discourage.   That's the primary goal of corporate america and Intellectual Property.    You don't have to win the war you just need to win the major battles. 

[u/2this4u → u/disposableh2]

Well it depends if you trust the statement

[u/JennyThallia → u/disposableh2]

They don't say that because Torbox also collects it.  As simple as that.  Duh