Quick answer
What data does Cobaltfell keep about me?
Cobaltfell holds only what billing and running a VPS require: an account number, each top-up and order, and for each VPS its plan, term, city, image, SSH key or temporary root password, IP addresses and dates. An email is optional. No connection or traffic logs are written, no cookies are set, and an unrenewed disk is erased after 7 days. Records are released only on a Panamanian court order.
1. The data controller
Cobaltfell is run by DomaineGoat LLC, a limited liability company registered in Panama, which answers for the data this policy describes. The same company appears as the seller in the terms of service. Send any privacy question to [email protected].
2. No logs
We run no connection logs and no traffic logs, and we store no IP address of a visitor or a customer, whether on this website, in the dashboard or on the servers.
Every request you make delivers your IP address to our servers, which is simply how the web works. We use it to answer that request and, held in memory only, to rate-limit requests; it is never written to disk or to a log. The network equipment of each datacenter is not ours to control and follows the law of the country where it stands.
3. Records we keep
What we hold is what billing and running a VPS need: your account number, and an email only if you add one; each top-up and order (amount, coin, network, transaction ID, date); and for each VPS its plan, term, city, image, SSH public key, IP addresses and dates, plus the temporary root password we set when no key was given, which no longer opens the VPS once you change it. The network gear of each datacenter belongs to the datacenter, not to us. Records leave our hands only on an order of a Panamanian court.
Every record appears in the table below with its purpose and its source, including the details you send along with an order.
| Record | Purpose | Source |
|---|---|---|
| Account number | Signs you in and ties your orders, balance and VPS together | Generated when the account is opened |
| Email address (optional) | Lets the recovery page send your account number back to you | Only when you add it |
| Each top-up: its transaction ID (TXID), coin, network, amount and date | Locating the payment on the blockchain so it can be credited | You and the public blockchain |
| Orders, terms and balance movements | Billing, renewals, term changes and refunds | The orders you place |
| Per VPS: plan, term, city, image, IP addresses and dates (created, renewed, suspended, deleted) | Running, renewing and billing the VPS | Your order and our team |
| SSH public key, if you paste one, and the name you give the VPS | Building or reinstalling the VPS with your key | You, at checkout |
| Temporary root password (set only for a VPS ordered without an SSH key) | Your first login to a VPS built without a key; once you change it, it no longer opens the VPS | Set by our team and shown in your dashboard |
| Referral code, when the link you arrived by contained one | Travels with a top-up to show which link brought the order | The link you followed |
| Dashboard language | Travels with a top-up so the team replies in your language | Your browser |
| Support emails | Replying to you | Messages you send us |
4. What we never collect
- No KYC at any point: no ID, no selfie, no documents, no card and no phone number.
- Your name, postal address and date of birth: no form asks for them, so we do not hold them.
- Card or bank data: only crypto is accepted, so none exists here.
- A private SSH key, the root password you set yourself or your account number sent by email. Nobody from our team will ever ask for your account number, your root password or your private SSH key, by email or in a chat.
5. Cookies and browser storage
Cobaltfell does not set cookies. Neither the website nor the dashboard loads analytics, advertising or tracking scripts, and every font is served from Cobaltfell's own server.
A few features save small items in your browser's storage. Unless the table marks an item as sent, it remains on your device until it expires or you clear it.
| Item | Where | What it holds | Sent to Cobaltfell? |
|---|---|---|---|
| Language choice | Website | The language selected in the menu | No |
| Session | Dashboard | A sign-in token that keeps the session open and is deleted when you sign out | Your account number travels with every dashboard request, over HTTPS |
| Account and payment copy | Dashboard | A copy of your account number, optional email and language, and of each top-up (reference, amount, coin, network, address, status), which lets a payment page reload without losing anything | Already held by us |
| Pending top-ups | Dashboard | Top-ups our server has not received yet, resent until it accepts them | Yes, until accepted |
| New account number | Dashboard, current tab only | A freshly created account number, kept until you confirm you have saved it | No |
| Dashboard language | Dashboard | Which language the dashboard uses | No |
If the computer is shared with others, sign out and clear this site's data once you are done.
For a payment in BTC, ETH, SOL, LTC or XMR, the payment page fetches the US dollar rate from a public price service: Coinbase, or CoinGecko whenever Coinbase gives no answer. Nothing identifying travels with that request (no cookie, no referrer, no account data), although the price service, like any website, can see your IP address. USDT and USDC are counted at one dollar each, so no rate request is made for them.
6. Payments on public blockchains
A payment in BTC, USDT, USDC, ETH, SOL or LTC is written to a public blockchain, where anyone can read its amount, its time and its addresses, so the transaction ID of such a top-up connects it to the history of the wallet it came from. A Monero payment sits on a public blockchain too, but an explorer shows neither its sender nor its amount. Whatever the coin, our own records still link your account to its orders, to the IP addresses of its VPS and to the TXID you declare (section 3). Before a payment is credited, the address that sent it is checked against public sanctions lists of blockchain addresses whenever its blockchain makes that address public; money from a listed address is never credited. No card network and no bank takes part in any payment. How paying in crypto works, without KYC, is explained on the page about a dedicated-vCPU VPS paid in crypto.
7. Optional email address
Whether you add an email address is up to you. Keep your account number safe, because it is the only key to your account. Add an email and a lost number can be sent back to you; with no email, nobody can restore it. When an email is on file, the recovery page of the dashboard mails your account number to it. When you write to support, your message and the address it came from are kept so that we can answer.
8. How data is used and who receives it
The records above serve to run your account, build and renew your VPS, credit payments, answer support requests and deal with abuse reports. Data is never sold, and none of it feeds advertising.
Only an order of a Panamanian court gets records out of our hands. A DMCA notice, or any other demand from abroad, receives no data at all. Cobaltfell is operated by DomaineGoat LLC, registered in Panama, and the only law it answers to is Panama’s. Each datacenter, for its part, is bound by the law of the country it stands in.
9. Retention periods
- VPS disk: when a VPS is not renewed, its disk is held for 7 days and erased afterwards. A deletion or a reinstall that you request erases it straight away.
- Temporary root password: it stays in the record of the VPS, but it stops opening the VPS the moment you change it at first login.
- Browser items: section 5 covers them; each one lasts until you sign out or wipe it.
10. Your choices
Cobaltfell works without an email address. From the dashboard you can delete any VPS at any time, and doing so erases its disk. Questions about the data on your account go to [email protected]; quote an order reference (ORD-…) in them and leave your account number out. Everything an order contains is visible on the pricing page before any payment.
11. Security
Since your account number is also your login, a password manager is the right place to store it. Root over SSH. Paste a public key at checkout and password login stays off; leave the field empty and the team sets a temporary root password, shown in your dashboard, that you replace at first login. If your VPS started with a temporary root password, change it at first login. Your private SSH key belongs on your own machine, and nobody at Cobaltfell ever needs it.
12. Age
Accounts are open only to people who are at least 18 years old. We do not knowingly keep data about anyone under that age.
13. Changes and contact
This policy may be revised. The version in force is the one dated at the top of the page. For privacy questions, write to [email protected].