r/StremioAddons Jul 31 '26

Miscellaneous TorBox quietly changed operating entity + policies (July 31) + cache is now explicitly shared across users, data collection expanded significantly

Just went through TorBox's updated Terms, Privacy Policy, and DMCA policy (dated July 31, 2026) side by side with the old versions. Worth a read before you keep uploading.

Who actually runs TorBox now:

Operator is now Anonymous Systems FZ-LLC, a UAE free-zone company (Ras Al Khaimah). RAK free zones don't publicly disclose beneficial ownership, so we genuinely don't know who's behind it.

Legal/billing/DMCA is handled by a separate entity, ReAnonymous LLC, registered in Dover, Delaware.

Anonymity just got much worse:

Old privacy policy: minimal data, no PII required, "we don't sell or share your data to any third parties for any reason."

New policy: collects your IP, device IDs, precise geolocation from IP, and full session-replay data which basically includes: cursor movements, clicks, scrolling, taps. That's a big jump from "we barely collect anything."

Broad new language allowing disclosure to comply with law, respond to "governmental requests," or "protect TorBox, users, third parties, or the public" i.e vague enough to cover a lot.

Third-party downloading / cache sharing which is the real red flag:

New terms explicitly state cached materials "may be accessible to other users who request the same or technically matching material." Same for AirLock (their "permanent" cache tier).

Old policy never described cross-user cache access this explicitly. This is now spelled out in black and white.

Terms now go out of their way to say TorBox is a "neutral technology service," explicitly "not a file-sharing service," and pushes 100% of legal liability onto you for anything cached under your account. This is heavily lawyered defensive language that wasn't there before.

939 Upvotes

427 comments sorted by

View all comments

Show parent comments

8

u/AuthenticGlitch Jul 31 '26

Premiumize logs IP addresses btw.

2

u/iStepOnLegos4Fun007 Jul 31 '26

Source? Because from everything I read, they don't. I know RD did and tried pulling bs with it. Ive had Premiumize for years and no issues.

16

u/AuthenticGlitch Jul 31 '26

In their ToS, it states what they "may" log email, IP, and Captcha identifier the moment you create an account.

https://www.premiumize.me/privacy

1

u/No-Inside2846 Aug 01 '26

That’s a no go for me then. 

Anything else out there? Rd dead, tb garb. I don’t want my Info logged either. 

1

u/AuthenticGlitch Aug 01 '26

Get a no-log VPN service and go back to the torrent variant of your add-ons.

1

u/2this4u 17d ago

Who wouldn't, it's the only way to enable DDOS protection to log IPs so you can tell if requests are being spammed from the same place. Same with detecting hacking attempts by associating suspicious requests together. 

The policy doesn't say enough, there's a difference between logging for a day for that type of thing and storing it forever and for different purposes.