TorBox's Privacy Policy

This document is the official and most updated version of the privacy policy. This document was last updated Saturday, September 21, 2024 and is in effect Friday, Janurary 12, 2024. This document can be found at https://github.com/TorBox-App/hosted-privacy_policy and https://torbox.app/privacy where it is mirrored between sites.

We are TorBox ("we", "us", "TorBox") operate https://torbox.app as well as any other related products and services that refer or link to these terms (collectively the "services" or "service").

Table of Contents

Data TorBox collects

Data TorBox does not collect

Sharing of data

Use of data

Right to Erasure

Data TorBox collects

TorBox does not require personally identifiable information to register or use the service. We also do not collect this personally identifiable information during your use of the service.

As a TorBox user, at any point, TorBox may be retaining the following information about your account:

Registration information. This includes email, hashed password and timestamps of account creation.

Information about downloads. This one is a little complex so let's talk about it. When you add a torrent (or any other download type on our service), we record the fact that you downloaded a torrent. This log stays in our database forever. It simply says "This user downloaded a torrent at this time". We don't permanently store torrent information. The information we do store in our database, or caches is metadata about the torrent. This includes information like name, hash, magnet link, download speed, upload speed, status and more. This information does not include anything about the user other than who started the download. When you delete a torrent all metadata about the torrent is deleted permanently. All that will be left is the record that you downloaded a torrent, nothing more, like we explained a bit ago. The download data is available to you and to you only. TorBox does not look at or access your downloads without express permission (usually done in support tickets). Your downloads you create are for you and you alone. No one will ever know you downloaded it.

Analytics information. We use SimpleAnalytics for analytics, which is a privacy first analytics platform and only takes in your device model, and the browser you are on. Pretty neat right?

Other than that, it's third parties. You can view them and their privacy policies below. We try and make smart choices about who we choose to partner with, but if you have any complaints about privacy, you will have to contact them.

• Sellix - Payments - https://help.sellix.io/en/articles/4534109-privacy-and-cookie-policy
• PayPal - Payments - https://www.paypal.com/us/legalhub/privacy-full
• Coinbase Commerce - Payments - https://commerce.coinbase.com/legal/privacy-policy/
• Supabase - Database/Auth/Websockets - https://supabase.com/privacy
• SimpleAnalytics - Analytics - https://simpleanalytics.com/privacy-policy
• Featurebase - Feature Requests/Changelog Widget on dashboard - https://www.featurebase.app/privacy-policy
• Cloudflare - DNS and Hosting - https://www.cloudflare.com/privacypolicy/
• Google - OAuth - https://policies.google.com/privacy
• Azure/Microsoft - OAuth - https://privacy.microsoft.com/en-us/privacystatement
• Dropbox - OAuth - https://www.dropbox.com/privacy
• OneSignal - Mobile Push Notifications - https://onesignal.com/privacy_policy
• SendGrid - Emails - https://www.twilio.com/en-us/legal/privacy
• Intercom - Help Center/Support Widget on dashboard - https://www.intercom.com/legal/privacy
• Discord - Discord Server Widget on dashboard - https://discord.com/privacy

That's it! Crazy right? In a world where all your data is being harvested, TorBox likes to go against the flow and reject taking your data.

Data TorBox does not collect

Your IP. No need to use a VPN with TorBox, or do, who cares?

Your activity on TorBox. We don't store logs at all.

Your location. That's basically just your IP, but we thought we should mention it anyways.

Your interests. No, we don't look at all the "Linux ISOs" you download to know what type of clothes you like to buy. We don't sell you ads. We don't care who you are, but we care about you <3.

Sharing of data

We don't sell your data, however little that may be, to any third parties or to ourselves. Your secrets are safe with us. We do in fact share some data with third parties, but we keep it to a minimum. At max, it is your email and internal user ID, but usually it is nothing.

Use of data

TorBox uses the above collected data for the following uses:

Registration data allows you to log in and access your account from any device. Pretty simple.

Information about downloads allows you to have a rich experience on the dashboard. All that data gives the dashboard the information it needs to serve you, and allow you to view your torrents with the most information of any debrid ever. You always know what the torrent's status is. Even if the torrent is no longer seeding, you can still have cool data about that torrent. If you delete it from your dashboard, that data is gone forever.

Long term storage of the downloads (remember the "This user downloaded a torrent at this time" part?) is used for a more rich experience, allowing you to view your basic stats. For free users, allows us to add a limit on how many, and how often free users are allowed to download new torrents.

Analytics allows TorBox to see how the service is doing, and where users are coming from, and what parts of the site are the most popular, allowing us to tailor the experience for the users.

Your email also allows us to send you notifications about your account. You can change this setting at https://torbox.app/settings

Third party data can be used for a lot of things. You will have to read more about each one on their own privacy policy pages.

Right to Erasure

Want your data deleted? No problem, either go to https://torbox.app/settings and click the "Delete Account" button under the "Account Section" or simply contact us with your email and it will be gone as soon as possible. This deletion will remove anything associated with your account, even including 3rd party data.

Data such as information about any download are deleted as soon as you request your download to be deleted. This can be done on the dashboard, by clicking on the download, and clicking the delete button, or by the API.