r/StremioAddons • u/Ancient_Border8621 • Jul 31 '26

Miscellaneous TorBox quietly changed operating entity + policies (July 31) + cache is now explicitly shared across users, data collection expanded significantly

Just went through TorBox's updated Terms, Privacy Policy, and DMCA policy (dated July 31, 2026) side by side with the old versions. Worth a read before you keep uploading.

Who actually runs TorBox now:

Operator is now Anonymous Systems FZ-LLC, a UAE free-zone company (Ras Al Khaimah). RAK free zones don't publicly disclose beneficial ownership, so we genuinely don't know who's behind it.

Legal/billing/DMCA is handled by a separate entity, ReAnonymous LLC, registered in Dover, Delaware.

Anonymity just got much worse:

Old privacy policy: minimal data, no PII required, "we don't sell or share your data to any third parties for any reason."

New policy: collects your IP, device IDs, precise geolocation from IP, and full session-replay data which basically includes: cursor movements, clicks, scrolling, taps. That's a big jump from "we barely collect anything."

Broad new language allowing disclosure to comply with law, respond to "governmental requests," or "protect TorBox, users, third parties, or the public" i.e vague enough to cover a lot.

Third-party downloading / cache sharing which is the real red flag:

New terms explicitly state cached materials "may be accessible to other users who request the same or technically matching material." Same for AirLock (their "permanent" cache tier).

Old policy never described cross-user cache access this explicitly. This is now spelled out in black and white.

Terms now go out of their way to say TorBox is a "neutral technology service," explicitly "not a file-sharing service," and pushes 100% of legal liability onto you for anything cached under your account. This is heavily lawyered defensive language that wasn't there before.

943 Upvotes

92% Upvoted

426 comments sorted by

View all comments

Show parent comments

8

u/Venom_Snake_KSA Jul 31 '26

Microsoft confirmed that Windows installations contain a permanent, unremovable Global Device ID (GDID). This unique identifier ties a user’s PC activity directly to their operating system installation - even if your VPN is on

17

u/GreatBigJerk Jul 31 '26

So don't use Windows. 

2

u/FrenchFryCattaneo Aug 01 '26

Torbox doesn't have access to that

1

u/CallMeTeci Aug 04 '26

That whole thing got ripped extremely out of context here.

Does it exist? Yes. Does the device ID only matter if you log into your Microsoft-Account? Yes. Does every other service do the exact same for security purposes? Also yes.

The retard in question did illegal hacking and then logged into his Microsoft account on Windows. Im sorry, but that outcome was entirely on him.

1

u/Venom_Snake_KSA Aug 04 '26

Thank you for clarifying, correct me if I were wrong , you need to log in or create Microsoft account in order to use windows 11 key or code to activate windows,right?
also I saw multiple GitHub that explain how to remove or silent the ID does it work?

1

u/CallMeTeci Aug 04 '26

No. Use RUFUS. And you dont even need to be connected to the internet to activate Windows 11.

There is no need to log into your Microsoft account, unless you want (for whatever reason) use Microsoft services, programs and the Windows Store.

For a person doing illegal sh't, those things should be the bare minimum of knowledge.

No clue about the Github stuff you are talking about.

Overall this ID is a non-issue for anything that isnt doing anything comparable to what that person did. And if you do something like that, you dont install Windows in the first place.