Acceptable Use Policy

1. Scope

Every Cobaltfell account and every VPS falls under this acceptable use policy, and so does every person who uses them. The policy forms part of the terms of service and applies to all plans listed on the pricing page. You answer for whatever runs on your VPS and for each person you allow to log in to it.

2. Applicable law

Cobaltfell is operated by DomaineGoat LLC, registered in Panama, and the only law it answers to is Panama’s. Each datacenter, for its part, is bound by the law of the country it stands in. When a legal demand rests on the law of another country, Cobaltfell takes no action on it.

3. Allowed uses

Any service that section 6 does not forbid may run on your VPS. The uses below are allowed by name:

• websites, web applications, APIs and self-hosted software;
• builds, CI runners, video encoding, CPU inference, databases and other heavy jobs of your own, at full load (section 4);
• self-hosted VPNs such as WireGuard or OpenVPN;
• Tor relays of every kind may run here, exit relays included, as well as bridges;
• full nodes for Bitcoin, Lightning or Monero that validate a blockchain;
• a mail server, provided its outgoing mail leaves through a mail provider on port 465 or 587 (section 7);
• servers for development, testing or personal use.

4. Mining and full CPU load

Mining any cryptocurrency is not allowed, on any plan and with any software. Your own heavy CPU work, such as builds, encoding, inference or databases, may run at full load, and a node that only validates a blockchain is not mining.

• Allowed: Full load is allowed for as long as your work needs it: no CPU credits, no burst window and no throttling after some minutes at 100%. Dedicated vCPU are sold so that your own work can use all of them.
• Forbidden: mining of any coin, with any software, whether solo or for a pool, and whether it is the main job of the VPS or hidden inside another program or container.
• Not mining: a node that only validates a blockchain and relays its blocks and transactions. Such a node is allowed.

A VPS caught mining is suspended like any other breach of section 6, with no credit for its remaining days.

5. DMCA and foreign copyright notices

DMCA notices and other foreign copyright claims receive no action from us: only Panamanian law and the orders of Panamanian courts bind us. Whether it is sent under the DMCA or under the copyright law of any other foreign country, a notice triggers neither a takedown nor a suspension.

Ignoring such notices leaves the rest of this policy intact: section 4 and section 6 apply to every VPS without exception.

6. Forbidden uses

Not allowed: spam or bulk email, phishing, malware or botnet control, DDoS and other attacks, scanning or brute-forcing systems that are not yours, booter or stresser services, carding and fraud, child sexual abuse material, cryptocurrency mining, and any service to sanctioned people or companies.

Some points of that list, spelled out:

• Mining: section 4 sets the rule and its limits.
• Scanning: your own systems may be scanned and tested; anyone else's may not.
• Spam: every VPS has outbound port 25 closed (section 7), and bulk email is forbidden through any port and any provider.
• Sanctions: Residents and companies of Cuba, Iran, North Korea, Syria, Russia, Belarus, China, Yemen and Western Sahara, and of the occupied regions of Ukraine, cannot use the service. Before a payment is credited, the address that sent it is checked against public sanctions lists of blockchain addresses whenever its blockchain makes that address public; money from a listed address is never credited.

7. Port 25 and email

Outbound port 25 is blocked on every VPS and is not opened on request; ports 465 and 587 towards a mail provider stay open. A mail server hosted on Cobaltfell therefore hands its outgoing mail to a mail provider over one of those two ports.

8. Abuse reports

Copyright complaints from outside Panama are not acted on; Panamanian law and Panamanian court orders are what we follow. Spam, phishing, malware, botnet control, attacks of any kind and child sexual abuse material are banned and get the VPS suspended.

Reports about a Cobaltfell IP address go to [email protected]. We can act on a report faster when it contains:

• the IP address of the VPS;
• the date and time of the activity, with its time zone, ideally UTC;
• which abuse it was (spam, phishing, malware, botnet control, an attack, a scan, mining);
• proof of the activity, for example log excerpts, mail headers or a URL.

Copyright notices mailed to that address receive no action, whether they invoke the DMCA or another foreign law.

9. Suspension

Breaking section 4 or section 6 gets the VPS suspended. The dashboard marks it as suspended, and support will give you the reason if you write in. Because the refund policy is limited to the cases it lists, the days left on a VPS suspended for a breach are not credited.

A VPS stopped because its term ran out unpaid is a separate matter, which the terms of service cover: its disk is held for 7 days and erased after that.

10. Appeals

Appeals against a suspension go to [email protected]. A person answers support emails within 12 hours, seven days a week, including help with SSH keys, reinstalls and firewall rules.

• Quote the order reference (ORD-…) together with the IP address of the VPS.
• Your account number never belongs in the message. Nobody from our team will ever ask for your account number, your root password or your private SSH key, by email or in a chat.
• Explain what happened and what you changed, for instance the malware you removed, the miner you uninstalled or the open mail relay you shut.

11. Legal orders

Only an order of a Panamanian court gets records released. The privacy policy lists every record that exists. We run no connection logs and no traffic logs, and we store no IP address of a visitor or a customer, whether on this website, in the dashboard or on the servers.

12. Changes to this policy

This policy may be updated. Updates take effect for every VPS from the date shown at the top, which identifies the version in force.