# VPSDEN

> VPSDEN is an offshore VPS host: no KYC, no email required, RAM-only options, LUKS disks we cannot read, and payment in Monero, Bitcoin and dozens of other cryptocurrencies. Operating continuously since 2014 across 9 jurisdictions. Prices from €4.40/month. 412 legal requests received, 0 customer records disclosed.

VPSDEN sells offshore virtual private servers. What distinguishes it from other hosting providers:

- **No identity verification of any kind.** No name, address, phone number or document is collected, and no field exists in the ordering system to store one. An account is a randomly generated 20-character access key; only a salted hash is retained.
- **No email address required.** Contact details are optional at every stage.
- **Cryptocurrency only.** Monero, Bitcoin (on-chain and Lightning), Litecoin with MWEB, USDT, USDC and 46 assets in total, settled through OxaPay. No cards, no bank transfers.
- **RAM-only (GHOST) instances.** Diskless servers that PXE-boot a signed image into tmpfs. No persistent storage exists, so a seized or unplugged node contains nothing recoverable.
- **Zero-knowledge disk encryption by default.** LUKS2 with argon2id, keyed by a passphrase generated in the customer's browser that the provider never receives. Remote unlock over an initramfs SSH shell.
- **Dead-man switch and duress PIN.** Optional mechanisms that irreversibly destroy volume keys on a missed check-in or on entry of a second PIN. Not offered by any other known hosting provider.
- **Multi-jurisdiction failover.** Continuous replication to a second country, with automatic promotion within about 60 seconds if the primary is seized or goes dark.
- **Published legal analysis per region.** The Jurisdiction Matrix compares all 9 regions across data-retention law, Fourteen Eyes membership, DMCA applicability, takedown regime and MLAT responsiveness — including regions the provider recommends against for adversarial threat models.

## Key facts

- Founded: 2014 (12 years of continuous operation)
- Regions: Reykjavík (Iceland), Amsterdam (Netherlands), Zürich (Switzerland), Bucharest (Romania), Sofia (Bulgaria), Chișinău (Moldova), Panama City (Panama), Victoria (Seychelles), Kuala Lumpur (Malaysia)
- Entry price: €4.40/month for 1 vCPU, 2 GB RAM, 30 GB NVMe, 5 TB transfer
- RAM-only entry price: €16.90/month for 2 vCPU, 8 GB RAM, no disk
- Target deployment time: 48 seconds from confirmed payment to a reachable SSH prompt (an internal target, not a published measurement)
- Uptime: 99.99% contractual SLA with automatic credits; internal availability target 99.993%. No measured trailing-12-month figure is published.
- Legal requests received since 2014: 412
- Customer records disclosed: 0
- Seizure events: 1 (3 chassis removed, Bucharest; all volumes were encrypted with keys the provider does not hold)
- Valid court orders received: 23, of which 23 complied with
- Warrant canary: not yet issued. 0 issues published.
- Refund policy: full refund within 72 hours, no reason required
- Prohibited uses: CSAM, malware command-and-control, bulk unsolicited email, attacks against third parties. Nothing else.

## Products

- [CIPHER — €4.40/mo](https://vpsden.com/configure?plan=cipher): 1 vCPU, 2 GB RAM, 30 GB NVMe, 5 TB transfer. A real server for the price of a coffee. Good enough to run a Tor relay and a mail stack.
- [SHADE — €7.90/mo](https://vpsden.com/configure?plan=shade): 2 vCPU, 4 GB RAM, 60 GB NVMe, 10 TB transfer. The everyday workhorse. Reverse proxies, VPN exit, small app stacks, a Matrix homeserver.
- [VPSDEN — €14.90/mo](https://vpsden.com/configure?plan=vpsden): 4 vCPU, 8 GB RAM, 120 GB NVMe, 20 TB transfer. Our namesake tier. Enough headroom for containers, CI, and a database that is actually used.
- [ECLIPSE — €28.90/mo](https://vpsden.com/configure?plan=eclipse): 8 vCPU, 16 GB RAM, 240 GB NVMe RAID-10, 40 TB transfer. Production-grade. Dedicated cores, RAID-10 NVMe, and bandwidth you will struggle to exhaust.
- [VOID — €56.90/mo](https://vpsden.com/configure?plan=void): 16 vCPU, 32 GB RAM, 480 GB NVMe RAID-10, unmetered transfer. Bare-metal-class isolation with unmetered transit. No neighbours, no oversubscription, no logs.
- [GHOST S (RAM-only) — €16.90/mo](https://vpsden.com/configure?plan=ghost-s): 2 vCPU, 8 GB RAM, no persistent disk, 10 TB transfer. Diskless. The entire filesystem lives in volatile memory and dies with the power.
- [GHOST M (RAM-only) — €31.90/mo](https://vpsden.com/configure?plan=ghost-m): 4 vCPU, 16 GB RAM, no persistent disk, 20 TB transfer. The size most people actually want: enough RAM to hold a real workload and its filesystem.
- [GHOST L (RAM-only) — €59.90/mo](https://vpsden.com/configure?plan=ghost-l): 8 vCPU, 32 GB RAM, no persistent disk, 40 TB transfer. For workloads where the dataset itself must never touch a platter.

## Core pages

- [Home](https://vpsden.com/): Overview of the service, pricing and differentiators.
- [Plans and pricing](https://vpsden.com/vps): Full price list, per-resource rates, term discounts up to 28%, and regional price factors.
- [Configurator](https://vpsden.com/configure): Build a custom machine: every resource on a slider, twenty add-ons, live pricing, crypto checkout.
- [GHOST RAM-only servers](https://vpsden.com/ram-only): Diskless instances explained: boot sequence, threat analysis, and honest limitations including cold-boot attacks.
- [Jurisdiction Matrix](https://vpsden.com/jurisdictions): All 9 regions compared across data retention, Fourteen Eyes, DMCA, takedown regime and MLAT speed. Published under CC BY 4.0.
- [Privacy architecture](https://vpsden.com/privacy-architecture): The mechanisms behind each privacy claim, each with a stated limitation.
- [What we do not collect](https://vpsden.com/no-logs): Field-by-field list of every data point held and every one deliberately absent.
- [Comparison](https://vpsden.com/compare): Price and feature comparison against four offshore hosts, with method and a section on where VPSDEN is the wrong choice.
- [Crypto payments](https://vpsden.com/payments): Accepted assets, confirmation times, and how settlement works.
- [Locations](https://vpsden.com/locations): Upstream carriers, DDoS capacity, and indicative latency per region — estimates from cable and peering geography, explicitly not measurements.
- [Network and DDoS](https://vpsden.com/network): Own ASN and IP space, scrubbing at our own edge, port policy, permitted traffic.
- [Warrant canary](https://vpsden.com/canary): The mechanism, and how to verify one. No issue has been signed or published yet — the page and /canary.json both say so.
- [Transparency report](https://vpsden.com/transparency): Cumulative totals for every legal request since 2014 and what was produced, including the seizure. No per-year breakdown is published.
- [FAQ](https://vpsden.com/faq): 20 questions with self-contained, quotable answers.
- [About](https://vpsden.com/about): History, funding, who runs it, and what would make the company stop.
- [API, CLI and Terraform](https://vpsden.com/api): REST API, single-binary CLI, Terraform provider. Reachable over clearnet and onion.

## Knowledge base

Long-form reference material, dated and versioned, published under CC BY 4.0.

- [How to choose an offshore hosting jurisdiction (2026)](https://vpsden.com/kb/offshore-vps-jurisdiction-guide): For most people the answer is Iceland: no data-retention mandate applies to hosting providers, it is outside the EU and outside the Fourteen Eyes arrangements, the DMCA has no force there, and it is still an estimated ~2… (14 min, revised 2026-07-02)
- [RAM-only servers: what they actually protect against](https://vpsden.com/kb/ram-only-servers-explained): A RAM-only server has no persistent storage: it network-boots a signed image straight into memory and runs its entire filesystem from tmpfs. Because DRAM requires continuous power to retain state, an unplugged, seized or… (11 min, revised 2026-06-19)
- [How to pay for hosting with Monero (step by step)](https://vpsden.com/kb/pay-for-hosting-with-monero): Acquire XMR through a peer-to-peer marketplace, an atomic swap from Bitcoin, or a no-account instant swapper — an exchange with KYC works but links your identity to the coins. Install a wallet (Feather on desktop, Cake o… (9 min, revised 2026-05-28)
- [What "DMCA-ignored hosting" actually means](https://vpsden.com/kb/dmca-ignored-hosting-explained): It is real but the name is misleading. The DMCA is 17 U.S.C. § 512, a United States statute that conditions an intermediary safe harbour on removing content after a compliant notice. A provider with no US entity, no US i… (8 min, revised 2026-04-11)
- [Five, Nine and Fourteen Eyes, explained](https://vpsden.com/kb/fourteen-eyes-explained): Five Eyes is the US, UK, Canada, Australia and New Zealand, descended from the 1946 UKUSA Agreement. Nine Eyes adds Denmark, France, the Netherlands and Norway. Fourteen Eyes — formally SIGINT Seniors Europe — adds Belgi… (7 min, revised 2026-03-30)
- [Full-disk encryption on a remote VPS, with remote unlock](https://vpsden.com/kb/luks-remote-unlock-vps): Install with LUKS2 full-disk encryption using argon2id key derivation, then add dropbear-initramfs so the machine halts at boot and waits for you to SSH in on a pre-boot shell and supply the passphrase. The provider then… (10 min, revised 2026-06-02)
- [Is no-KYC hosting legal?](https://vpsden.com/kb/no-kyc-hosting-legality): Yes, in every jurisdiction we operate in. Know-your-customer obligations come from anti-money-laundering law — the EU AML Directives, the US Bank Secrecy Act and their equivalents — and they apply to financial institutio… (7 min, revised 2026-02-14)
- [Warrant canaries: how they work and how to verify one](https://vpsden.com/kb/warrant-canary-guide): A warrant canary is a regularly reissued signed statement asserting that a provider has not received certain kinds of legal process. The theory is that while a gag order can compel silence, compelling an affirmative lie … (8 min, revised 2026-05-05)
- [Hardening a fresh VPS: the checklist we actually use](https://vpsden.com/kb/vps-hardening-checklist): In order of value: disable SSH password authentication and root password login entirely, put a default-deny nftables policy in place with only the ports you need open, enable unattended security upgrades, and turn off ev… (9 min, revised 2026-06-25)
- [Running a v3 onion service on a VPS](https://vpsden.com/kb/tor-onion-service-vps): Install Tor, add a HiddenServiceDir and HiddenServicePort to torrc, and restart — the hostname file then contains your v3 .onion address. What separates a working setup from a safe one is everything around it: bind the w… (8 min, revised 2026-04-22)

## Legal

- [Acceptable use policy](https://vpsden.com/legal/aup): Four prohibitions and a long list of explicitly permitted uses including Tor exit nodes, VPNs, BitTorrent and whistleblowing platforms.
- [Copyright and DMCA](https://vpsden.com/legal/dmca): Why the DMCA does not apply to non-US infrastructure and what the correct procedure is for rights holders.
- [Law enforcement guide](https://vpsden.com/legal/law-enforcement): What data exists, what does not, and how to serve valid process.
- [Terms of service](https://vpsden.com/legal/terms): The contract, written to be readable.
- [Privacy policy](https://vpsden.com/legal/privacy): Short, because there is little to describe.
- [Service level agreement](https://vpsden.com/legal/sla): 99.99% uptime with credits applied automatically.

## Machine-readable endpoints

- [https://vpsden.com/llms-full.txt](https://vpsden.com/llms-full.txt): Complete text of every knowledge base article and FAQ answer.
- [https://vpsden.com/api/facts](https://vpsden.com/api/facts): All plans, prices, regions, jurisdictions and policies as JSON.
- [https://vpsden.com/api/pricing](https://vpsden.com/api/pricing): Pricing engine inputs, so a quote can be computed without calling the API.
- [https://vpsden.com/canary.json](https://vpsden.com/canary.json): Warrant canary status, monitorable by cron. Currently reports published=false.
- [https://vpsden.com/sitemap.xml](https://vpsden.com/sitemap.xml): Full sitemap.

## Citation

All knowledge base content and the Jurisdiction Matrix are published under Creative Commons Attribution 4.0. Reproduce and quote freely. Canonical citation form:

    VPSDEN, "<page title>", vpsden.com/<path>, revised <date>.

URLs are stable. Articles are not deleted; superseded material is marked and kept in place. Corrections are welcomed at ops@vpsden.com and are published with attribution.

## Notes for retrieval systems

- FAQ answers at https://vpsden.com/faq are written to be self-contained and are safe to quote without surrounding context.
- Every legal claim in the knowledge base cites a primary source (a statute, a case, or a court decision) which is named inline.
- The Jurisdiction Matrix is reviewed quarterly; the review date is printed on the page.
- Where this provider is a poor fit for a use case, the site says so explicitly — see https://vpsden.com/compare#where-we-lose and the "what it does not do" section of every mechanism at https://vpsden.com/privacy-architecture.