Frequently asked questions

Correct. Ordering requires an email address and a payment, and that is the whole list. There is no document upload, no selfie, no phone verification, no address check and no card on file. We have never run identity verification and we do not plan to start — the cheapest way to protect customer documents is to never hold any.

Your email address, your invoices, the configuration of your servers, and 72 hours of NetFlow-level connection metadata used only for abuse investigation. Nothing else. When you close the account, all of it is erased within 24 hours except invoices, which accounting law makes us keep for ten years — those hold an invoice name of your choosing and no verified identity.

Yes, and plenty of customers do. Anything that reliably reaches you works — Proton, Tuta, SimpleLogin, addy.io, a catch-all on your own domain. The only thing to keep in mind is that server credentials and renewal notices go there, so if you lose access to the mailbox you lose access to the account.

Yes. The order flow, the console and the API all work over Tor and over any VPN. We do not fingerprint browsers, we do not score orders for fraud risk, and we do not block exit nodes.

Because it is what makes the price possible. Monthly billing means churn, idle capacity kept warm for people who might come back, payment retries and support load. Selling in terms removes all of it, and lets us buy hardware against known demand rather than a forecast. The saving goes straight into the rate card — a twelve-month Base works out around 20% below the six-month rate, and both are below what monthly billing would cost us to offer.

Cryptocurrency, through OxaPay. Forty-two assets are accepted, including Bitcoin, Monero, Litecoin, Ethereum, TON, Solana, Tron and USDT on several chains. You are quoted in euros, the invoice locks a rate for the payment window, and provisioning begins on the first network confirmation — typically under two minutes on Monero or Litecoin.

Ask for a refund within 72 hours of provisioning and you get the whole amount back, in the asset you paid with, at the rate on the day of purchase. No form, no reason, no retention call. Run every benchmark you like inside that window — that is precisely what it is for.

We email you 30, 7 and 1 days before it ends with a renewal invoice. Nothing auto-charges, because we hold no payment method. If the term lapses the server is suspended, kept intact for 10 days, and only then destroyed. If hardware has got cheaper since you signed up, the renewal is quoted at the current lower rate rather than the one you originally paid.

Yes. Set the invoice name in the console and every PDF from that point on carries it, along with a VAT line if you supply a number. We do not verify the name, and outside the EU no VAT is charged at all.

Three reasons, none of them exciting. We buy last-generation-plus-one EPYC hosts outright instead of renting capacity from a hyperscaler. We sell terms, so a host is full the day it is racked instead of three months later. And we do not employ a sales team. What we do not do is oversubscribe past 3:1 on fair-share plans or past 1:1 on dedicated-core plans — the numbers on the performance page come from production hosts under real load.

Fair-share is right for almost everything: web apps, databases under a few hundred queries a second, game servers, VPN endpoints, CI that is not on the critical path. Choose dedicated cores when a workload is CPU-bound for minutes at a time — video transcoding, compilation, backtesting, inference — or when a scheduler's p99 matters more than its median. It adds 55% to the plan price and removes neighbours from your cores entirely.

Fleet-wide, the 95th percentile on fair-share plans sits at 1.4% and on dedicated-core plans at 0.0%. We publish the rolling figure on the status page. If a host drifts above 3% steal we stop selling on it and migrate instances off, which is why some sites show 'low stock' from time to time.

Two manual snapshots per instance are free and always available. Scheduled backups are an option priced as 10% of the compute line for weekly and 20% for daily — weekly keeps four restore points in the same country, daily keeps fourteen in a second one. Restores are self-service from the console and take minutes, not a ticket.

Upwards, at any time, with the difference pro-rated across the remaining term. Downwards at the end of the term. Memory and vCPU changes need a reboot; disk grows online. Moving between regions is a rebuild, not a resize — the data does not follow.

Windows Server 2019, 2022 and 2025 Standard, with the SPLA licence included in the monthly figure shown at configuration. Remote Desktop is open on first boot and the licence is ours, so you do not need to bring one.

One dedicated IPv4 and a routed /64 of IPv6 with every plan. Up to eight extra IPv4 addresses can be added at €1.20 each per month, assigned from the region's own prefix so geolocation stays consistent. A routed /48 of IPv6 is €2 a month if you are running your own network behind us.

Yes, on every plan, with no separate charge and no traffic threshold. Volumetric attacks are absorbed by hardware scrubbers at the edge and mitigation engages in under four seconds. The advanced tier adds layer-7 scrubbing and rules you write yourself, which matters for game servers and public APIs but not for much else.

Port 25 is closed by default on new instances and opened on request — send a ticket saying what you are sending and to roughly how many recipients. It usually takes under an hour. Custom reverse DNS on both v4 and v6 is self-service from the console, which is the part that actually determines whether your mail lands.

The one closest to your users, not to you. Every location costs the same, so there is no reason to compromise. The locations page lists median round trip from residential probes in each metro, and there is a live latency test on every site page. If you are unsure, Frankfurt and Amsterdam reach the most people in the fewest milliseconds.

You can deploy a replacement in the new region and migrate, and support will run the transfer for you at no charge if you ask. What we cannot do is move an instance between regions in place — the disk stays where the metal is, and the IP address belongs to that region's prefix.

No. No identity checks means we do not care who you are; it does not mean we do not care what leaves our network. Phishing, spam, malware distribution, botnet command-and-control, credential stuffing, outbound attacks and material involving minors get the instance terminated immediately, without refund and without appeal. The acceptable use policy is two pages, written in plain language, and we apply all of it.

Yes to all three, and thousands of customers do. Tor exit nodes are permitted in Amsterdam, Reykjavík, Chișinău and Bucharest, and we ask you to run the standard reduced exit policy and set an abuse contact. Exits are not permitted in the remaining regions, because their upstreams do not tolerate them and we would rather tell you that than have your server disappear.

We forward it to you with the evidence and give you 24 hours to respond, except for active outbound attacks and CSAM, which are cut immediately. We do not suspend on receipt of an unverified complaint, and we do not hand over customer data without an order valid in the jurisdiction the server sits in. When we do receive such an order, we tell you unless we are legally barred from doing so.

A team of nineteen, mostly in Europe, operating our own hardware in leased space since 2014. We are not a reseller of somebody else's cloud, we have taken no outside investment, and the company has been profitable since 2017 — which is why we can afford to turn business away.