隐私政策

#我们收集的内容

• An email address you supply — the only identifier we hold
• A payment reference and amount from OxaPay, which does not include a wallet identity
• Instance metadata: plan, region, assigned addresses, operating system, power state
• Aggregate bandwidth counters, for billing and capacity planning
• Support correspondence you send us, retained for 90 days after resolution

#我们不收集的内容

• Legal name, postal address, date of birth or government identification
• Payment card details or bank information — we cannot accept them
• Phone numbers
• Netflow records or connection logs of any kind
• DNS query logs on our resolvers
• Signup or control-panel IP addresses, beyond the lifetime of the session
• The contents of your instance storage

#本网站

No analytics, no cookies, no third-party scripts, no fonts loaded from a CDN, no tracking pixels. Nothing on any page of this site makes a request to a host we do not operate. Server access logs are retained for 24 hours for operational debugging and then discarded.

#披露

We disclose data only where compelled by valid legal process from a court with jurisdiction over OnionVPS, and then only what is ordered. Where the law permits, we notify the affected customer first so they can challenge the order themselves. Where a gag order forbids notification, the warrant canary carries that information instead.

We do not sell, rent, share or trade customer data with anyone, under any circumstances, and there is no advertising or analytics relationship through which it could leak.

#静态数据

Any provider with hypervisor access can technically read an unencrypted guest disk. That is true of every virtualisation platform including every hyperscaler, and claims to the contrary are false. Our staff do not access guest storage except where you ask us to, or where a valid order compels it. On the Bastion line, disks are LUKS2-encrypted with a passphrase we never hold.

#您的权利

You may request a copy of everything we hold about you, or its deletion, by writing to the address below from your account email. Because we hold so little, both requests are usually satisfied within one business day. Deletion of an active account terminates service.