Frequently asked questions

Correct. Ordering takes an email address and a crypto payment. No passport scans, no selfies, no phone verification, no card on file. The cheapest way to protect customer documents is to never hold any — and nothing in this paragraph is a soft version of that policy.

An email address, invoices, your server configuration, and 72 hours of connection metadata used only for abuse investigations. Everything is deleted within 24 hours of account closure; invoices are kept for 10 years because Estonian accounting law requires it. The full retention table lives on the no-KYC page.

VPSGrid Cloud Hosting OÜ, Sepapaja 6, 15551 Tallinn, Estonia. The contract runs under Estonian law, and the EU data rules we do follow apply to the bits we hold. The server's disk is a different question: every site page says which jurisdiction the hardware sits in, because that is the law that reaches the disk.

There is very little to hand over: an email address, an invoice, and 72 hours of NetFlow metadata. We publish every disclosure request we act on in the journal — numbers, not names. We have never collected an ID document, a phone number or a payment identity, so no request can ever reach those.

Long terms remove churn, which removes marketing spend and billing machinery, which lands in the price. The 12-month term is roughly 20% below the 6-month term — the Nano is €1.90 instead of €2.40 per month. Nothing renews automatically, and a renewal is never quoted above the current rate.

In cryptocurrency, via a payment processor that quotes your invoice in euros and locks the exchange rate for 60 minutes. Twenty-four assets are accepted, including Monero, Bitcoin, Lightning and USDT. The server provisions on the first network confirmation — usually about two minutes after you send.

From provisioning you have 72 hours to request a full refund: no form, no reason field. The refund is paid in the asset you sent, converted at the day-of-purchase rate, within two business days. The one exception is written in the terms in plain English: abuse terminations are not refunded.

Nothing renews automatically. You get emails 30 days and 7 days before the end with the current renewal rate. If you do not renew, the server runs until the term ends, is suspended through a 7-day grace period, then is destroyed along with its snapshots and backups. Export anything you need first — we cannot recover destroyed data, by design.

Adding resources mid-term is instant: extra vCPUs, memory, NVMe and snapshots apply within minutes and are billed proportionally for the rest of the term, payable once. Moving between the seven sizes, or downscaling, is not possible mid-term — but the renewal rate is never higher than the current one, so switching sizes at renewal costs nothing in margin.

We own the hardware, we sell only long terms, and there is no sales team to pay. Oversubscription is capped at 3:1 on fair-share plans (1:1 on dedicated cores), and hosts that drift past the cap stop being sold until they are fixed. Benchmarks are published every 90 days, not in adjectives.

Fair-share runs on a 3:1 oversubscription cap; fleet p95 CPU steal is 1.6%, and the worst host we will sell is still above the floor of typical budget VPSes (which sit around 11.8% p95 steal). Dedicated cores are 1:1 — p95 steal 0.0%, no neighbours — and add 55% to the plan price. Same EPYC hosts either way.

Sixteen images: Ubuntu 24.04 and 22.04 LTS, Debian 13 and 12, AlmaLinux 9, Rocky Linux 9, Alpine 3.21, Arch, Fedora Server 41 and FreeBSD 14.2, plus Windows Server 2022 and 2025 (licence €11.00 or €12.50 per month). Four one-click stacks ship on Debian: Docker Engine, WireGuard, Nextcloud AIO and Mailcow. Bring your own ISO over the VNC console at no charge.

99.97% across the fleet over the trailing 24 months, measured from our own probes every 60 seconds and counting unplanned downtime at every site equally. Planned maintenance is excluded and announced 72 hours ahead on the status page. Every number on that page is raw — there is no rounding step between our probes and your screen.

The typical map: Nano runs small websites, personal VPNs and cron; Micro runs mail servers and bots; Base — the most-chosen plan — runs Docker stacks, Nextcloud and staging; Work is a production web or Postgres box; Forge and above are build machines, pipelines and media jobs. Game servers want dedicated cores: an 8.53-per-month Base with 1:1 vCPUs holds its tick rate. Windows licences add €11.00 or €12.50 per month depending on version.

Every plan includes 2 manual snapshots with one-click restore from the console — restore overwrites the disk in place and takes two to five minutes. For hands-off backups, weekly costs +10% of the plan (4 restore points) and daily +20% (14 restore points); both are stored off-host, and restores are self-service. The runbook for it is on the help page.

Forty-one sites in thirty-two countries across Europe, the Americas, Asia-Pacific and the Middle East — Frankfurt, Amsterdam, London, Seoul, Tokyo and Singapore among them. Same price everywhere, same console, same API — pick by round trip, then by which law reaches the disk.

No regional premiums, no mystery tiers, no 'please contact sales' pricing. Our cost differences between sites are smaller than our hatred of price tables with asterisks. Local probes show 2–5 ms median RTT inside a region, and the site pages publish real cross-region numbers — Frankfurt to New York is 78 ms, Singapore to Frankfurt is 118 ms.

Always-on volumetric filtering — L3/L4, up to 5 Tbit/s of scrubbing capacity — on every plan at every site, engaging in a median of 3.1 seconds. The largest attack we have absorbed was 1.2 Tbit/s against a Frankfurt tenant in January 2026; nobody noticed except the graph. Advanced protection (€3.90/month) adds L7 scrubbing and custom rules for HTTP(S) workloads.

Every plan includes one dedicated IPv4 and a routed /64 IPv6, both with free custom PTR records that propagate in a couple of minutes. A routed /48 costs €2.00/month, and extra IPv4 addresses are €1.20/month each, up to eight per server. Everything is announced from our own AS212345 — no third-party RIR account needed.

Sites open when regional utilization and real demand justify the racks — we are a small company and we would rather run forty-one sites we can answer for than a hundred we cannot. The roadmap is public on the journal, and every planned site is announced there first. If your region is not on it, peering@vpsgrid.site is read by a human who answers in about twelve minutes.

No. Phishing, spam, malware, botnet command-and-control and CSAM get terminated immediately, without refund and without appeal. Privacy is not a licence to harm people. The acceptable use policy is two pages long and we mean all of it — which is exactly why we need so little of your identity.

A report lands with a human — median first response twelve minutes. NetFlow metadata for the last 72 hours lets us see exactly what your server did. CSAM is an immediate termination and a report to the authorities in the host country. Spam, phishing and malware get a written notice and up to 24 hours to clean up; repeat offenders are terminated without refund, per the terms you agreed to.

Inbound traffic is unmetered; outbound is the allotment on your plan (2–40 TB per month by size), and we do not charge overage — a sustained overage gets a letter, not a bill. Port 25 is closed by default and opened on request after a short review for mail-server use. Crypto mining is not banned: it is your CPU. Just know that a €1.90 Nano mines about four cents a day, and the neighbours can hear it.

Within 24 hours of account closure every server is destroyed and every backup, snapshot and log tied to you is deleted. Invoices stay for 10 years because the law requires it; the email address stays until you ask us to purge it. There is no retention team, no 'data portability partner', and no sale of the list — there is barely a list to sell.