Quick answer
What does Coffervale keep about me?
What we hold is limited to what billing and running a server need: your account number, plus an email only if you add one; every top-up and order with its amount, coin, network, transaction ID and date; and for each server its plan, term, city, system, SSH public key or temporary root password, IP addresses and dates. Only an order of a Panamanian court can make us release any of these records. An email address exists on your account only if you add one. Coffervale sets no cookies, loads no analytics or advertising scripts, and never asks for an identity document, a selfie or a card.
1. Who is responsible
DomaineGoat LLC, a limited liability company registered in Panama, runs Coffervale and is responsible for the data described here. It is the seller named in the terms of service. Questions about this policy go to [email protected].
2. No logs
We keep no logs: no record of connections or traffic and no IP address of a visitor or customer, whether on this website, in the dashboard or on the host machines.
Like every website, ours receives your IP address with each request. It serves to answer that request and, held in memory only, to limit how many requests one address can make; it is never written to a log or a file. The datacenters that house our servers run their own network equipment, under the law of their own country, which we do not control.
3. The records we keep
Each record below exists because billing or running a server needs it. Nothing else about you is stored.
| What we hold | Purpose | Source |
|---|---|---|
| Account number | Signs you in and ties together your balance, orders and servers | Created with your account |
| Email address (optional) | Sends your account number back if you lose it | Only if you add one |
| Top-ups: amount, coin, network, date, transaction ID | Finds the payment on its blockchain and credits it | You, and the public blockchain |
| Orders and balance movements | Billing, renewals and credited days | Your orders |
| Each server: plan, term, city, system, IP addresses, dates | Runs, renews and bills the server | Your order and the team |
| SSH public key, or the temporary root password we set | Builds or reinstalls the server with your access | You at checkout, or the team when you gave no key |
| Server name you choose | Lets you tell your servers apart | You |
| Referral code, if your link carried one | Records where an order came from | The link you followed |
| Dashboard language | Lets the team answer in context | Your browser |
| Support emails | To answer you | Messages you send |
4. The contents of your disk
The files on your storage VPS are yours. We do not open, index or copy them, and we keep no backup of them. Whoever runs a hypervisor can technically read an unencrypted virtual disk, at any VPS host. We do not open your files, and data you encrypt before it leaves your machine takes the question off the table. KVM gives your server its own kernel, so you can put LUKS on the data disk or run ZFS with native encryption, and the keys never leave you. For backups, encrypt on your own machine before upload (Borg, restic and Kopia all do it), so the server only ever holds ciphertext.
When a server ends, deleted by you or left unpaid past its 7-day hold, its disk is wiped and nobody can bring the data back, us included.
5. What we never collect
- No KYC: no ID document, no selfie, no card and no phone number is asked at signup.
- No legal name, home address or birth date: none of our forms has a field for them.
- No card number or bank account: we take crypto and nothing else.
- No private SSH key, no root password you chose, no account number by email. Nobody from our team will ever ask for your account number, your root password or your private SSH key, by email or in a chat.
6. Cookies and browser storage
Coffervale sets no cookies. The website and the dashboard load no analytics, advertising or tracking scripts, and the fonts are served from our own domain.
Some parts of the site save small items in your browser's local storage; they stay on your device until they expire or you delete them.
| Item | Where | What it holds | Sent to us? |
|---|---|---|---|
| Language | Website | The language you picked | No |
| Session | Dashboard | A sign-in token, removed when you sign out | With each dashboard request, over HTTPS |
| Account and payment copy | Dashboard | Account number, optional email, language and your top-ups, so a payment page survives a reload | Already on file |
| Unsent top-ups | Dashboard | Top-ups our server has not confirmed receiving, retried until it does | Yes, until received |
| Fresh account number | Dashboard, current tab only | A newly created account number, kept until you confirm you stored it | No |
If the computer is shared, sign out and delete the site's stored data afterwards. For BTC, ETH, SOL or LTC, the payment page asks a public price service for the dollar rate (Coinbase, or CoinGecko if Coinbase does not answer). That request carries no cookie, no referrer and no account data, though the service sees your IP address as any website would. USDT and USDC count as one dollar and need no rate.
7. Crypto payments are public
A crypto payment is written on a public blockchain: its amount, time and addresses are visible to anyone. Once you give us its transaction ID, a top-up is linked to the history of the wallet that paid it. Each incoming payment is screened against public sanctions lists of blockchain addresses, and money from a listed address is never credited. No card or bank processor is involved. The steps of a payment are on paying for a storage VPS with crypto.
8. How data is used and who receives it
The records above serve to run your account, build and renew servers, credit payments, answer support and handle abuse reports. We sell no data and use none for advertising.
Only a Panamanian court order releases records. We take no action on DMCA notices or any other foreign copyright notice: Panamanian law and the orders of Panamanian courts are the only ones Coffervale follows. That is not a licence, since our own rules still forbid publicly distributing content you hold no rights to. Foreign demands of any other kind receive no data.
9. How long data is kept
- Account, orders and top-ups: as long as the account exists and billing requires it.
- A server's disk: held for 7 days after a term lapses, then wiped; wiped at once when you delete the server or ask for a reinstall.
- Items in your browser: kept on your device until you sign out or delete them (section 6).
10. Your choices
You can use Coffervale without giving an email. You can delete any server from the dashboard, which wipes its disk. For questions about the data on your account, write to [email protected] with an order reference (ORD-…), never your account number.
11. Security
Anyone with your account number can sign in as you, so store it in a password manager. Root logs in over SSH. Paste a public key at checkout and password login stays off; leave the field empty and the team sets a temporary root password, shown in your dashboard, that you replace at your first login. Keep private SSH keys and disk encryption keys on your own devices; nobody at Coffervale needs them.
12. Age
Only adults, aged 18 and over, may open an account. Should we learn that an account belongs to a minor, we close it.
13. Changes and contact
We may update this policy; the date at the top shows the version in force. Questions: [email protected].