# Privacy Policy for Coffervale storage VPS

> Coffervale privacy policy for storage VPS: the billing records kept, no connection or traffic logs, no cookies, crypto payments, disk wiping, no KYC.

- URL: https://coffervale.com/privacy/
- Last updated: 2026-11-02
- Publisher: Coffervale (https://coffervale.com)

Which records Coffervale keeps and why, what it never records, what sits in your browser, what happens to your disk, and when anything is handed over.

**Quick answer — What does Coffervale keep about me?**

What we hold is limited to what billing and running a server need: your account number, plus an email only if you add one; every top-up and order with its amount, coin, network, transaction ID and date; and for each server its plan, term, city, system, SSH public key or temporary root password, IP addresses and dates. Only an order of a Panamanian court can make us release any of these records. An email address exists on your account only if you add one. **Coffervale** sets no cookies, loads no analytics or advertising scripts, and never asks for an identity document, a selfie or a card.

## 1. Who is responsible

DomaineGoat LLC, a limited liability company registered in Panama, runs Coffervale and is responsible for the data described here. It is the seller named in the [terms of service](https://coffervale.com/terms/ "Coffervale terms of service"). Questions about this policy go to support@coffervale.com.

## 2. No logs

We keep no logs: no record of connections or traffic and no IP address of a visitor or customer, whether on this website, in the dashboard or on the host machines.

Like every website, ours receives your IP address with each request. It serves to answer that request and, held in memory only, to limit how many requests one address can make; it is never written to a log or a file. The datacenters that house our servers run their own network equipment, under the law of their own country, which we do not control.

## 3. The records we keep

Each record below exists because billing or running a server needs it. Nothing else about you is stored.

| What we hold | Purpose | Source |
| --- | --- | --- |
| Account number | Signs you in and ties together your balance, orders and servers | Created with your account |
| Email address (optional) | Sends your account number back if you lose it | Only if you add one |
| Top-ups: amount, coin, network, date, transaction ID | Finds the payment on its blockchain and credits it | You, and the public blockchain (for Monero, without the sender or the amount) |
| Orders and balance movements | Billing, renewals and credited days | Your orders |
| Each server: plan, term, city, system, IP addresses, dates | Runs, renews and bills the server | Your order and the team |
| SSH public key, or the temporary root password we set | Builds or reinstalls the server with your access | You at checkout, or the team when you gave no key |
| Server name you choose | Lets you tell your servers apart | You |
| Referral code, if your link carried one | Records where an order came from | The link you followed |
| Dashboard language | Lets the team answer in context | Your browser |
| Support emails | To answer you | Messages you send |

## 4. The contents of your disk

The files on your storage VPS are yours. We do not open, index or copy them, and we keep no backup of them. Whoever runs a hypervisor can technically read an unencrypted virtual disk, at any VPS host. We do not open your files, and data you encrypt before it leaves your machine takes the question off the table. KVM gives your server its own kernel, so you can put LUKS on the data disk or run ZFS with native encryption, and the keys never leave you. For backups, encrypt on your own machine before upload (Borg, restic and Kopia all do it), so the server only ever holds ciphertext.

When a server ends, deleted by you or left unpaid past its 7-day hold, its disk is wiped and nobody can bring the data back, us included.

## 5. What we never collect

- No KYC: no ID document, no selfie, no card and no phone number is asked at signup.
- No legal name, home address or birth date: none of our forms has a field for them.
- No card number or bank account: we take crypto and nothing else.
- No private SSH key, no root password you chose, no account number by email. Nobody from our team will ever ask for your account number, your root password or your private SSH key, by email or in a chat.

## 6. Cookies and browser storage

Coffervale sets no cookies. The website and the dashboard load no analytics, advertising or tracking scripts, and the fonts are served from our own domain.

Some parts of the site save small items in your browser's local storage; they stay on your device until they expire or you delete them.

| Item | Where | What it holds | Sent to us? |
| --- | --- | --- | --- |
| Language | Website | The language you picked | No |
| Session | Dashboard | A sign-in token, removed when you sign out | With each dashboard request, over HTTPS |
| Account and payment copy | Dashboard | Account number, optional email, language and your top-ups, so a payment page survives a reload | Already on file |
| Unsent top-ups | Dashboard | Top-ups our server has not confirmed receiving, retried until it does | Yes, until received |
| Fresh account number | Dashboard, current tab only | A newly created account number, kept until you confirm you stored it | No |

If the computer is shared, sign out and delete the site's stored data afterwards. For BTC, ETH, SOL, LTC or XMR, the payment page asks a public price service for the dollar rate (Coinbase, or CoinGecko if Coinbase does not answer). That request carries no cookie, no referrer and no account data, though the service sees your IP address as any website would. USDT and USDC count as one dollar and need no rate.

## 7. What a crypto payment shows in public

A payment in BTC, USDT, USDC, ETH, SOL or LTC is written on a public blockchain: its amount, time and addresses are visible to anyone, and once you give us its transaction ID, the top-up is linked to the history of the wallet that paid it. Monero is the exception, since a public block explorer shows neither the sender nor the amount of a Monero payment. Either way, our billing ties the top-up to your account, to its orders and to the IP addresses of its servers. Each incoming payment is screened against public sanctions lists of blockchain addresses, and money from a listed address is never credited; a Monero payment keeps its sending address out of view, so that screening has no address to check. No card or bank processor is involved. The steps of a payment are on [paying for a storage VPS with crypto](https://coffervale.com/storage-vps-with-crypto/ "Coins, networks and confirmation times").

## 8. How data is used and who receives it

The records above serve to run your account, build and renew servers, credit payments, answer support and handle abuse reports. We sell no data and use none for advertising.

Only a Panamanian court order releases records. We take no action on DMCA notices or any other foreign copyright notice: Panamanian law and the orders of Panamanian courts are the only ones Coffervale follows. That is not a licence, since our own rules still forbid publicly distributing content you hold no rights to. Foreign demands of any other kind receive no data.

## 9. How long data is kept

- **Account, orders and top-ups:** as long as the account exists and billing requires it.
- **A server's disk:** held for 7 days after a term lapses, then wiped; wiped at once when you delete the server or ask for a reinstall.
- **Items in your browser:** kept on your device until you sign out or delete them (section 6).

## 10. Your choices

You can use Coffervale without giving an email. You can delete any server from the dashboard, which wipes its disk. For questions about the data on your account, write to support@coffervale.com with an order reference (ORD-…), never your account number.

## 11. Security

Anyone with your account number can sign in as you, so store it in a password manager. Root logs in over SSH. Paste a public key at checkout and password login stays off; leave the field empty and the team sets a temporary root password, shown in your dashboard, that you replace at your first login. Keep private SSH keys and disk encryption keys on your own devices; nobody at Coffervale needs them.

## 12. Age

Only adults, aged 18 and over, may open an account. Should we learn that an account belongs to a minor, we close it.

## 13. Changes and contact

We may update this policy; the date at the top shows the version in force. Questions: support@coffervale.com.

---

Coffervale: Coffervale sells storage VPS in Europe: KVM servers with 500 GB to 8 TB of HDD storage for off-site backups, Nextcloud, Seafile, Syncthing and archives, paid in crypto with no ID at signup. The servers run in Amsterdam, Bucharest and Chișinău, and the operator is DomaineGoat LLC, a company registered in Panama. On the 12-month term, every plan is priced at least 25% a month under a named comparable storage VPS, picked from 10 no-KYC crypto hosts whose prices were read on 2 November 2026.