Privacy Policy

#What we collect

• An email address you supply — the only identifier we hold
• A payment reference and amount from OxaPay, which does not include a wallet identity
• Instance metadata: plan, region, assigned addresses, operating system, power state
• Aggregate bandwidth counters, for billing and capacity planning
• Support correspondence you send us, retained for 90 days after resolution

#What we do not collect

• Legal name, postal address, date of birth or government identification
• Payment card details or bank information — we cannot accept them
• Phone numbers
• Netflow records or connection logs of any kind
• DNS query logs on our resolvers
• Order source IP and browser information are stored for order management; see the order privacy notice
• The contents of your instance storage

#This website

No analytics, no cookies, no third-party scripts, no fonts loaded from a CDN, no tracking pixels. Nothing on any page of this site makes a request to a host we do not operate. Server access logs are retained for 24 hours for operational debugging and then discarded.

#Disclosure

We disclose data only where compelled by valid legal process from a court with jurisdiction over OnionVPS, and then only what is ordered. Where the law permits, we notify the affected customer first so they can challenge the order themselves. Where a gag order forbids notification, the warrant canary carries that information instead.

We do not sell, rent, share or trade customer data with anyone, under any circumstances, and there is no advertising or analytics relationship through which it could leak.

#Data at rest

Any provider with hypervisor access can technically read an unencrypted guest disk. That is true of every virtualisation platform including every hyperscaler, and claims to the contrary are false. Our staff do not access guest storage except where you ask us to, or where a valid order compels it. On the Bastion line, disks are LUKS2-encrypted with a passphrase we never hold.

#Your rights

You may request a copy of everything we hold about you, or its deletion, by writing to the address below from your account email. Because we hold so little, both requests are usually satisfied within one business day. Deletion of an active account terminates service.