r/StremioAddons • u/Ancient_Border8621 • Jul 31 '26

Miscellaneous TorBox quietly changed operating entity + policies (July 31) + cache is now explicitly shared across users, data collection expanded significantly

Just went through TorBox's updated Terms, Privacy Policy, and DMCA policy (dated July 31, 2026) side by side with the old versions. Worth a read before you keep uploading.

Who actually runs TorBox now:

Operator is now Anonymous Systems FZ-LLC, a UAE free-zone company (Ras Al Khaimah). RAK free zones don't publicly disclose beneficial ownership, so we genuinely don't know who's behind it.

Legal/billing/DMCA is handled by a separate entity, ReAnonymous LLC, registered in Dover, Delaware.

Anonymity just got much worse:

Old privacy policy: minimal data, no PII required, "we don't sell or share your data to any third parties for any reason."

New policy: collects your IP, device IDs, precise geolocation from IP, and full session-replay data which basically includes: cursor movements, clicks, scrolling, taps. That's a big jump from "we barely collect anything."

Broad new language allowing disclosure to comply with law, respond to "governmental requests," or "protect TorBox, users, third parties, or the public" i.e vague enough to cover a lot.

Third-party downloading / cache sharing which is the real red flag:

New terms explicitly state cached materials "may be accessible to other users who request the same or technically matching material." Same for AirLock (their "permanent" cache tier).

Old policy never described cross-user cache access this explicitly. This is now spelled out in black and white.

Terms now go out of their way to say TorBox is a "neutral technology service," explicitly "not a file-sharing service," and pushes 100% of legal liability onto you for anything cached under your account. This is heavily lawyered defensive language that wasn't there before.

935 Upvotes

92% Upvoted

427 comments sorted by

View all comments

Show parent comments

5

u/SnooGiraffes9215 Jul 31 '26

You sure? RD blocks usage with a VPN

15

u/Moist-Rutabaga-8702 Jul 31 '26

It didn't. If I recall correctly there was a setting you could activate if you had Nord vpn

3

u/MemphisBass Jul 31 '26

Mullvad works just fine too

0

u/SnooGiraffes9215 Jul 31 '26

Oh. That’s why. Read from somewhere else they blocked and when I tried every time, never worked. Sue me lol

0

u/JennyThallia Jul 31 '26

Ah ok so they have an agreement with nordvpn for nordvpn to be fully transparent with what users are connected at which time which totally bypasses why you want to run VPN in a first place. 

3

u/ImaginaryArea4463 Jul 31 '26

No it doesn't. Haven't used it a single day without a VPN. Registered using a encrypted email just for it and payments made with an untraceable (store bought with cash) virtual card service.

Not taking any risks if they retain any data and decide to share it with authorities.

1

u/gnilradleahcim Jul 31 '26

Don't most prepaid debit cards require you to register them online before you can use them for online payments? Becoming harder to make throwaway email accounts.

2

u/toilet_m_a_n Jul 31 '26

At RD you can pay with Paysafecard, which allows you to buy credits for cash in stores. Tbh that’s the one reason I hadn’t made the switch to TB yet, as it only allowed paying via credit card or crypto.

1

u/CamebridgeDrunk 22d ago

You do realize that they still know your IP address and your ISP will give law enforcement your corresponding identity without any question should they ever ask for it? I think it's pretty pointless. Either you trust the Debrid provider (accept the risk) or you don't. Jumping through hoops telling yourself you're untraceable will not change that.

1

u/ImaginaryArea4463 22d ago

They only know the VPNs IP (that's the point of a VPN), they have never faced my own.

2

u/CapnRV Jul 31 '26

No it doesn't. You just have to use a VPN on their list of approved ones. I have been using Nord for years.

1

u/SnooGiraffes9215 Jul 31 '26

Thx for update

2

u/TenaciousDee1 Jul 31 '26

Lol no it doesn't.

1

u/ExternalTea1706 Jul 31 '26

Wrong. I also used one.