To get access to the rest of the community Discord, we require all users to link their TorBox and Discord accounts. This acts as a verification process, so that we know you won't spam, scam, send illicit messages or pictures to our users. User protection is our highest priority, which is why we have this method.
To link your account is extremely easy!
Simply go to the "Linked Roles" section in our Discord settings (the top left where it says "TorBox" with a dropdown), then hit the "TorBox" button.
Once you have done that, it will forward you to your browser (please ensure you're already logged into TorBox on this browser).
The verification will ask for confirmation linking your Discord account.
Once linked, return to the "Linked Roles" section to verify there's a checkmark.
FAQ
Q: Won't Discord see my TorBox account?
A: No. Discord sees no information about you or TorBox other than your TorBox plan, and when you created your TorBox account. There is no sensitive information given to Discord.
Q: Why not just use a different Discord verification system?
A: We would prefer that user data is stored with us, encrypted in our database, rather than you giving an unknown amount of personal information to a third party. User protection is our highest priority, so we take great care in privacy, and what information is stored and how we store it.
Q: I haven't gotten my role yet!
A: Please double check that you have a checkmark in the "Linked Roles" section of the Discord server settings. If not, please tap the "TorBox" button and go through the verification process again.
Q: I don't like this system.
A: Unfortunately, there are no other alternatives to get access to the official TorBox Discord community. Our subreddit has a large community, and there are numerous third party Discord servers where TorBox users often hang out, you can try there. We apologize for the inconvenience.
Data TorBox Stores
TorBox stores the following information once you have linked your accounts:
Your Discord ID
This ID is public and not sensitive information. It is used to associate your Discord account and your TorBox account.
Your Discord Oauth Access Token
This access token allows us to request your Discord ID at any time.
This token is encrypted in our database.
Due to the permissions we request "identify", and "role_connections.write", this token cannot be used for anything other than getting your user information (non-sensitive), and updating your role in the TorBox Discord server.
This is the data that we receive from Discord found in Discord's Docs. We do not have access to your Discord email.
Your Discord Oauth Refresh Token
This refresh token allows us to get a fresh access token at any time.
This token is encrypted in our database.
This refresh token can be invalidated at any time at your will. You can do that by going to your Discord profile -> Authorized Apps -> Find TorBox (or search for it) -> Click "Deauthorize". By doing this, TorBox will no longer be able to update your role on the TorBox Discord.
TorBox encrypts these keys so that attackers, hackers, or authorized users cannot get ahold of your Discord information, however little that may be.