Terms of Service

NoctHost is a crypto-funded VPS host. You rent real cloud servers — provisioned on third-party clouds (Vultr, DigitalOcean, Linode) through their APIs — paid for from a prepaid cryptocurrency balance and billed by the hour. Your relationship with us is an email address and a crypto balance; nothing more.

By creating an account or using the service you agree to these terms and to our acceptable-use policy.

We do not perform Know-Your-Customer (KYC) checks and we will never require identity verification as a condition of using the service. Your account is an email address. We do not collect, ask for, or verify your legal name, government ID, home address, payment card, or phone number.

Renting a Linux or Windows server is not a regulated financial activity, and we treat it that way. Privacy is the default here, not something you have to request. The only identifier we hold is the email you sign up with.

You register with an email and a password (or Google sign-in). You are responsible for keeping your credentials safe and for everything that happens on servers you deploy. If you lose access to your email you may lose access to the account, since it is the only identity on file.

You top up a prepaid balance with cryptocurrency (Bitcoin, Monero, USDT and many other coins). Servers and other resources are billed by the hour and the charge is drawn from your balance. Billing stops the moment you destroy a resource.

If your balance reaches zero, active servers are snapshotted and archived so you stop paying; you can restore them by topping up within the retention window, after which archived data is deleted. We show your hourly spend so you always know how long your balance lasts.

NoctHost's staff, moderators and owners do not access, monitor or inspect the contents of your servers. Your files, data and network traffic are yours alone.

We are not a party to, and are not associated with or responsible for, whatever customers store or run on their servers. What you deploy is entirely your own responsibility. We do not proactively look at customer data; we respond only to specific, external abuse reports tied to a server by its IP address and a timestamp, as described in our acceptable-use policy.

Privacy-friendly is not abuse-friendly. Spam, phishing, malware or C2, botnets, DDoS attacks, and CSAM are prohibited and lead to termination. Abuse reports are tied to a specific server by IP and timestamp and acted on. See the full acceptable-use and abuse policy for what is prohibited and how reports are handled.

Your servers are ordinary cloud instances running on the underlying providers we resell. We add the payment rail, the privacy boundary and a single consistent API on top, and reconcile state with the providers continuously. An outage or action on the provider's side can affect your server; we are a small team and provide the service on a best-effort basis without an uptime guarantee.

We may suspend or terminate resources for violations of the acceptable-use policy or for non-payment. You can destroy your servers at any time. Serious abuse (for example CSAM or ongoing attacks) results in immediate termination without notice.

The service is provided "as is", without warranties of any kind. To the extent permitted by law, our liability is limited to the amount you paid for the affected service. You are responsible for backing up your own data; snapshots are a convenience, not a guarantee.

We may update these terms as the service evolves; material changes will be reflected here. Questions about these terms go to [email protected], and abuse reports to [email protected].