22 questions, answered without hedging.

No. NimbusVPS does not perform KYC (Know Your Customer) checks and never asks for identity documents, a phone number, a selfie, or a proof of address. Ordering requires exactly two things: a working email address for service notices, and a cryptocurrency payment. You may use a disposable or aliased email address.

Offshore VPS plans start at $2.90 per month for 1 vCPU, 1 GB RAM, 25 GB NVMe storage and 2 TB of transfer. The most commonly ordered plan is Standard at $8.90 per month (3 vCPU, 4 GB RAM, 90 GB NVMe, 6 TB transfer). Custom configurations are priced per unit — roughly $0.90 per vCPU, $0.80 per GB of RAM and $0.035 per GB of NVMe, per month.

NimbusVPS accepts 8 cryptocurrencies, paid straight to our own wallets: Bitcoin (BTC), Monero (XMR), Litecoin (LTC), Ethereum (ETH), Tron (TRX), Solana (SOL), and USDT and USDC on TRC-20 or ERC-20. Prices are quoted in USD and converted at the rate shown on the invoice, which is locked for the invoice lifetime.

No. NimbusVPS is crypto-only by design. Card networks and PayPal both require merchant-side identity collection and impose chargeback processes that are incompatible with running a service where customers are not identified. Accepting only cryptocurrency is what makes the no-KYC promise structurally true rather than a marketing line.

Deployment is automatic and begins at the first network confirmation of your payment. Our published target is a server accepting SSH within 5 minutes of that confirmation; we do not publish a measured median, because we have no monitoring history behind it yet and would rather quote a commitment than a guess. Bitcoin confirmations typically add 10–20 minutes, while Monero, Litecoin, Tron and Solana usually confirm in under two minutes.

Yes. Every new VPS carries a 7-day money-back guarantee. Request a refund from the control panel within 7 days of first deployment and you receive the full amount back to a cryptocurrency address of your choosing, less network fees. The guarantee applies once per customer and does not cover dedicated servers, licences already purchased on your behalf, or accounts terminated for acceptable-use violations.

Three things: the email address you supplied, the cryptocurrency transaction reference for each invoice, and the technical metadata required to operate your server (hostname, IP assignments, resource limits, snapshot index). NimbusVPS does not store names, addresses, government identifiers, payment card data, or browsing activity. Server access logs are retained for 0 days — that is, they are not retained.

No. NimbusVPS does not run deep packet inspection, does not mirror customer traffic, and does not maintain NetFlow records tied to customer identity. Aggregate port-level counters exist for capacity planning and DDoS detection, and they contain no payload and no per-destination data. What runs inside your VPS is invisible to us short of a hypervisor-level action, which we do not take absent a court order in the server's jurisdiction.

NimbusVPS responds only to legally valid orders issued by a court with jurisdiction over the datacenter holding the server. Requests by email from foreign agencies, informal police enquiries and civil demands without a court order are refused and logged. Because we hold almost no customer data, the practical answer to most requests is that the requested information does not exist. Our transparency report sets out that process and will carry the per-quarter counts; no reporting period has closed yet, so it currently publishes the method and an empty table rather than numbers we would have had to make up.

Yes to Tor relays, bridges and VPN endpoints — these are explicitly permitted and there is a free toggle at checkout that flags the server so our abuse desk handles reports correctly. Tor exit relays are permitted in Netherlands, Iceland, Romania and Moldova, and not in the United States location. Running an exit node generates abuse complaints; flagging it in advance is what stops those complaints from becoming suspensions.

It means a US copyright notice has no legal force in the hosting jurisdiction, so it compels nothing on arrival. At NimbusVPS that describes 4 of our 8 locations — Iceland, Moldova, Panama and Seychelles — where notices are filed and forwarded to the customer for information, with no action taken and no suspension. Two limits worth knowing before you rely on it. Our 3 EU sites (the Netherlands, Romania and Bulgaria) are deliberately not on that list: a US notice has no direct force there either, but the Digital Services Act (Regulation (EU) 2022/2065, Art. 16) obliges us to accept a complaint and deal with it, and an adequately substantiated one leaves us knowing something we cannot then sit on — so calling those sites DMCA-ignored would be a claim EU law does not let us keep. And everywhere, including the United States where the full DMCA applies, a court order from the host country's own judiciary is honoured and our acceptable use policy still applies.

Child sexual abuse material, spam and unsolicited bulk email, phishing and credential harvesting, malware command-and-control, denial-of-service attacks launched from our network, carding and fraud infrastructure, and anything criminal under the law of the country hosting the server. These are enforced in every location without exception, including those marked DMCA-ignored. Verified reports in these categories result in immediate suspension without refund.

Choose by threat model, not by marketing. Romania and Bulgaria give EU-grade infrastructure and data protection while US copyright notices carry no direct force — the right default for most privacy-conscious customers, provided you accept that EU law still obliges us to act on a properly substantiated complaint. Iceland has statutory source protection in its Media Act (No. 38/2011) and ties removal duties to a court injunction, which matters for journalism and archives. Panama protects private correspondence at constitutional level and makes a foreign demand travel through Panamanian courts; it has also held a mutual legal assistance treaty with the United States since 1995, and the Panama location page explains what that treaty does and does not reach. Moldova and Seychelles are the furthest from EU and US process, though Moldova shares the Budapest Convention with the US. The Netherlands is the fastest network and carries the same EU obligations as Bucharest and Sofia; the United States location is subject to full DMCA and exists purely for latency-bound North American workloads.

Full KVM hardware virtualisation on AMD EPYC and Ryzen hosts. You get your own kernel, which means you can load kernel modules, run WireGuard and nftables, use Docker and nested virtualisation, mount any filesystem, and boot a custom ISO. NimbusVPS does not sell OpenVZ, LXC or shared-kernel containers under the "VPS" name.

Yes. The control panel exposes an ISO upload and a virtual optical drive, plus a browser KVM console with full boot-time access, so you can install any operating system that runs on x86-64 — including Windows, pfSense, TrueNAS, Proxmox, Whonix, Qubes or a hand-rolled image. 13 ready-made templates are also available, and Linux and BSD templates cost nothing extra.

Your port is throttled to 10 Mbps for the remainder of the billing month. NimbusVPS does not bill overage charges and does not suspend a server for exceeding transfer — an unexpected invoice is worse than a slow month. You can lift the throttle at any time by adding transfer in the panel at $1.50 per TB, or by switching the server to unmetered for a flat $24 per month.

Yes, on every plan including the $2.90 one, at no extra cost. Standard protection is always-on layer 3 and 4 filtering: 16.5 Tbps of scrubbing across the fleet, of which up to 6.5 Tbps sits at a single site — capacity protects the site you are in, not the sum of all of them, so the per-site figure on each location page is the one to read. There is no null-routing of attacked IPs and no traffic redirection. Optional Advanced protection at $5 per month adds layer-7 inspection, HTTP challenge and game protocol profiles.

Yes. vCPU, RAM and disk can all be increased from the control panel, with the change applied at the next reboot and billed pro rata against your current term. Disk can be grown but not shrunk, which is a limitation of live filesystem resizing rather than a policy. Migrating a server between NimbusVPS locations is also supported and is performed as a snapshot transfer, with the downtime depending on disk size.

Yes. A REST API covers server lifecycle (create, rebuild, resize, destroy), power control, snapshots, firewall rules, reverse DNS and invoice retrieval, authenticated with a scoped token you generate in the panel. A Terraform provider is published under our GitHub organisation. The API is documented at /docs/api and is the same interface the control panel itself uses.

You receive renewal notices 7 days, 3 days and 1 day before expiry. If payment has not confirmed by the expiry date the server is suspended but preserved intact. Data is retained for a further 7 days, during which paying the outstanding invoice restores the server exactly as it was. After that grace period the disks are securely erased and the resources released. There are no late fees.

Support runs 24 hours a day, seven days a week, through tickets in the control panel and by email to [email protected]. Our first-response target on the standard tier is 12 minutes; it is a target we work to rather than a measured average, and it is not contractual. The Priority support add-on at $9 per month makes a 15-minute first response contractual and adds operating-system-level assistance to the scope.

NimbusVPS is incorporated in Seychelles. The registered company name is not published here yet. The name previously shown could not be reconciled with the jurisdiction and form of incorporation stated elsewhere on this site, so it was withdrawn, and it goes back only from the incorporation record. We deliberately do not print a founding year or a customer count anywhere on this site: we have no published record you could check them against, and a number nobody can check is decoration. What we do run is our own addressing rather than an upstream's, which is why no upstream can unilaterally pull a customer's prefix — the autonomous system number, and its current status, are on the network page.