TorBox's Privacy Policy

This document is the official and most updated version of the privacy policy. This document was last updated Thursday, November 21, 2025 and is in effect Friday, Janurary 12, 2024. This document can be found at https://github.com/TorBox-App/hosted-privacy_policy and https://torbox.app/privacy where it is mirrored between sites.

We are TorBox ("we", "us", "TorBox") operate https://torbox.app as well as any other related products and services that refer or link to these terms (collectively the "services" or "service").

Table of Contents

Data TorBox collects

Data TorBox Does Not Collect

Sharing of Data

Use of Data

Payment Data

Right to Erasure

Data TorBox Collects

TorBox does not require personally identifiable information to register or use the service. We also do not collect this personally identifiable information during your use of the service. TorBox was built with privacy being first, so you can be assured that we take privacy very seriously.

As a TorBox user, at any point, TorBox may be retaining the following information about your account:

Registration information: This includes email, hashed password and timestamps of account creation.

Information about data transfers: When you create a new transfer, we retain certain metadata such as file owners, identifiers and hashes, transfer speeds, total transferred volume, and timestamps. We do not permanently store information that is not necessary and purge from our records stored information that is no longer required, such as when a transfer is deleted and no longer associated with an account. TorBox does not look at or access your transferred data without your permission.

Analytics information. We use SimpleAnalytics for analytics, which is a privacy first analytics platform and only takes in your device model, and the browser you are on.

Information collected by third parties as well as their specific polices can be found below:

• Spreedly - Card Information - https://www.spreedly.com/privacy
• Chargebee - Payments - https://www.chargebee.com/privacy/
• Supabase - Database/Auth - https://supabase.com/privacy
• SimpleAnalytics - Analytics - https://simpleanalytics.com/privacy-policy
• Featurebase - Feature Requests/Changelog Widget on dashboard - https://www.featurebase.app/privacy-policy
• Cloudflare - DNS and Hosting - https://www.cloudflare.com/privacypolicy/
• Google - OAuth - https://policies.google.com/privacy
• Azure/Microsoft - OAuth - https://privacy.microsoft.com/en-us/privacystatement
• SendGrid - Emails - https://www.twilio.com/en-us/legal/privacy
• Intercom - Help Center/Support Widget on dashboard - https://www.intercom.com/legal/privacy

Sharing of Data

We don't sell or share your data to any third parties for any reason.

Use of Data

TorBox uses the above data for the following:

Registration data allows you to log in and access your account from any device.

Information about transfers enables you to have a rich experience on the platform.

Aggregated data is presented for information purposes only, such as total transferred volume.

Analytics allows TorBox to see how the service is doing, and where users are coming from, and what parts of the site are the most popular, allowing us to tailor the experience for our users.

Your email also allows us to send you notifications about your account. You can change this setting at https://torbox.app/settings

Payment Data

TorBox is PCI compliant, and does not store your payment information on our servers. Your card information is stored securely by Spreedly, a third party who manages all payment information and payment orchestration for TorBox. This data is never removed, and is stored according to their privacy policy. This includes name, address, card information, and other verification info you may have provided when paying for the TorBox service. TorBox is not responsible for the removal of this data, nor is TorBox responsible for the upkeep and safety of this information.

Right to Erasure

Want your data deleted? No problem, either go to https://torbox.app/settings and click the "Delete Account" button under the "Account Section" or simply contact us with your email and it will be gone as soon as possible. This deletion will remove anything associated with your account. To remove any third party data associated with your account, you must contact the respective part to have it removed.

Data such as information about any transfer is deleted when requested. This can be done on the dashboard, by clicking on the transfer, and clicking the delete button, or via the API.