我们要什么，以及永远不会要什么

Correct. Ordering requires an email address and a payment, and that is the whole list. There is no document upload, no selfie, no phone verification, no address check and no card on file. We have never run identity verification and we do not plan to start — the cheapest way to protect customer documents is to never hold any.

Your email address, your invoices, the configuration of your servers, and 72 hours of NetFlow-level connection metadata used only for abuse investigation. Nothing else. When you close the account, all of it is erased within 24 hours except invoices, which accounting law makes us keep for ten years — those hold an invoice name of your choosing and no verified identity.

Yes, and plenty of customers do. Anything that reliably reaches you works — Proton, Tuta, SimpleLogin, addy.io, a catch-all on your own domain. The only thing to keep in mind is that server credentials and renewal notices go there, so if you lose access to the mailbox you lose access to the account.

Yes. The order flow, the console and the API all work over Tor and over any VPN. We do not fingerprint browsers, we do not score orders for fraud risk, and we do not block exit nodes.

No. No identity checks means we do not care who you are; it does not mean we do not care what leaves our network. Phishing, spam, malware distribution, botnet command-and-control, credential stuffing, outbound attacks and material involving minors get the instance terminated immediately, without refund and without appeal. The acceptable use policy is two pages, written in plain language, and we apply all of it.

Yes to all three, and thousands of customers do. Tor exit nodes are permitted in Amsterdam, Reykjavík, Chișinău and Bucharest, and we ask you to run the standard reduced exit policy and set an abuse contact. Exits are not permitted in the remaining regions, because their upstreams do not tolerate them and we would rather tell you that than have your server disappear.

We forward it to you with the evidence and give you 24 hours to respond, except for active outbound attacks and CSAM, which are cut immediately. We do not suspend on receipt of an unverified complaint, and we do not hand over customer data without an order valid in the jurisdiction the server sits in. When we do receive such an order, we tell you unless we are legally barred from doing so.

A team of nineteen, mostly in Europe, operating our own hardware in leased space since 2014. We are not a reseller of somebody else's cloud, we have taken no outside investment, and the company has been profitable since 2017 — which is why we can afford to turn business away.