What does Coffervale know about me and my storage VPS?

Who builds the server, and how do I get in?

A person on the team creates each storage VPS by hand once the payment is confirmed, and the dashboard tracks it until the IP address shows up. That is slower than an automatic checkout, and we say it before you pay rather than after.

At checkout you choose a plan, a rental length, a city and a system. Root logs in over SSH. Paste a public key at checkout and password login stays off; leave the field empty and the team sets a temporary root password, shown in your dashboard, that you replace at your first login. If you skipped the key, change the temporary password with passwd at your first login, add your key to /root/.ssh/authorized_keys and turn password login off.

Reboot, reinstall and deletion are requested in the dashboard and done by the team; a reinstall or a deletion wipes the disk.

What do we record, and what do we never record?

We record what billing and running a server need, and nothing about how you use it.

What we hold is limited to what billing and running a server need: your account number, plus an email only if you add one; every top-up and order with its amount, coin, network, transaction ID and date; and for each server its plan, term, city, system, SSH public key or temporary root password, IP addresses and dates. Only an order of a Panamanian court can make us release any of these records.

We keep no logs: no record of connections or traffic and no IP address of a visitor or customer, whether on this website, in the dashboard or on the host machines. Your IP address reaches our website with each request, as it does on any site; it is used to answer that request and is not written to a file.

No KYC: no ID document, no selfie, no card and no phone number is asked at signup. According to Coffervale's survey of 2 November 2026, 16 of the 18 storage VPS sellers that take crypto without an ID document require an email address; Coffervale asks for none. The record-by-record list is in the privacy policy.

Can Coffervale see the files on my disk?

Technically, whoever runs the hypervisor could read an unencrypted disk; in practice, we do not look, and you can make the question moot. Whoever runs a hypervisor can technically read an unencrypted virtual disk, at any VPS host. We do not open your files, and data you encrypt before it leaves your machine takes the question off the table.

Two ways to close it:

• Encrypt before upload. Borg, restic and Kopia encrypt every backup on your machine with a key we never see. Syncthing can hold a folder as an untrusted, encrypted device.
• Encrypt the data disk. KVM gives your server its own kernel, so you can put LUKS on the data disk or run ZFS with native encryption, and the keys never leave you. For backups, encrypt on your own machine before upload (Borg, restic and Kopia all do it), so the server only ever holds ciphertext. Keep the system disk unencrypted and the data disk under LUKS: after a reboot, log in over SSH and unlock the data disk with your passphrase.

Either way, a copy of your data on our disks is unreadable without a key that stays with you.

Does Coffervale back up my data?

No, and you should plan as if your server could disappear tomorrow. We take no backup of your server and keep no copy of your data anywhere else, so what sits on a Coffervale storage VPS should be one of your copies, never the only one.

• Disk redundancy keeps a server running through a failed drive; it does not undo a deletion, ransomware or a lost account, so it is not a backup.
• A snapshot sits on the same disks as the server it captures, so it can roll back a mistake but it is not an off-site copy.
• One storage VPS is one copy in one place. The 3-2-1 rule asks for three copies, on two kinds of media, with one of them off-site: a storage VPS fits as that off-site copy, next to two you keep yourself.

A storage VPS is a very good off-site copy. It is a poor only copy.

What happens to my data when a server ends?

It is held for 7 days if the server lapsed, then wiped; it is wiped at once if you delete it. A server lapses when the balance cannot pay its renewal at the end of the term.

When a server ends, deleted by you or left unpaid past its 7-day hold, its disk is wiped and nobody can bring the data back, us included. A reinstall you request also wipes the disk. If you might come back, renew before the 7 days run out: the server restarts with its disk as you left it.

Which law applies, and how are complaints handled?

Panamanian law, and nothing else, governs the company; the rules of use govern your server. Coffervale is a brand of DomaineGoat LLC, a company registered in the Republic of Panama, and it answers only to Panamanian law; each datacenter that hosts a server is bound by the law of the country it stands in.

• Copyright notices: We take no action on DMCA notices or any other foreign copyright notice: Panamanian law and the orders of Panamanian courts are the only ones Coffervale follows. That is not a licence, since our own rules still forbid publicly distributing content you hold no rights to.
• Abuse: Copyright notices from abroad, DMCA included, lead to no action; Panamanian law and Panamanian court orders decide. Spam, phishing, malware, botnet command, attacks and child sexual abuse material are banned and end in suspension. Reports go to [email protected].
• Tor: Tor relays may run on a Coffervale server, exit relays included.
• Requests for records: handed over only on the order of a Panamanian court, and only the records listed above exist.

What is allowed and what is not is written out in the acceptable use policy; the contract itself is the terms of service.

What are the honest limits?

We would rather list them here than have you discover them:

• Not instant: a person builds each server.
• HDD, not SSD: disks chosen for capacity, with no speed or IOPS figure published.
• No backups on our side, and no snapshots sold as backups.
• No in-place growth: a larger plan and a copy of your data replace a resize.
• 8 TB at most: past that size, a dedicated storage server fits better than a VPS.
• No Monero: payment is in BTC, USDT, USDC, ETH, SOL, LTC only.
• No uptime percentage: we publish none; days lost to a failure we cannot fix are credited back, as the refund policy sets out.