BTCVPS

Anonymous VPS hosting provider accepting Bitcoin and Monero, operating out of Netherlands and Lithuania. Listed at Grade B because two independent peer directories confirm the listing and a Terms of Service + Acceptable Use Policy page exist — but the site has no privacy policy, no AML disclosure, no /about page, and the legal-URL auto-discovery probe timed out against the domain.

What it is. Bitcoin-accepting VPS host with datacenters in the Netherlands and Lithuania. Listed at Grade B — the grade floor is set by two documented legal pages (ToS at `/legal/terms-of-service`, AUP at `/legal/acceptable-use-policy`) and peer-directory confirmation across kycnot.me and monerica; the ceiling is capped by total absence of a privacy policy, AML disclosure, and operator background pages.

What you trust. KYC stance: no privacy policy, FAQ, or /about page surfaced that would document the signup process. The homepage title claims anonymous hosting (peer_matches.kycnot. Verify the signup fields during your first test trade. Payment surface: no operator-published coin list found on a discoverable page. The homepage title references Bitcoin (operator-published), and peer directories list Monero support. Verify the accepted coins during your first checkout flow. AML posture: Undisclosed — No AML language was surfaced from the ToS or AUP pages either since the raw page content is. Terms of service: Documented — `/legal/terms-of-service` returns a custom 15KB page titled 'Terms of Service'. Full text was not captured in this review; Read and cite the data-collection, cancellation, and payment clauses. The conventional `/terms`, `/tos`, and `/terms-of-service` root-level slugs all 404 — the page only exists under the `/legal/` prefix. Acceptable use policy: Documented — `/legal/acceptable-use-policy` returns a custom 17KB 'Acceptable Use Policy' page. This is unusual for a B-grade listing A published AUP is a positive compliance signal for a VPS provider. Privacy policy: Not discovered — no privacy-policy page exists on the host. This is the single largest trust-signal gap in the listing: a published ToS and AUP without a matching privacy policy is an asymmetrical disclosure pattern worth flagging. Reserves transparency: No live reserves panel. VPS hosts do not conventionally maintain a public reserves sheet, so this is less damning than for an exchange — but it means there is no verifiable assurance the operator segregates customer prepayments from operating capital.

Operational specs. Jurisdictions: Netherlands and Lithuania (operator-published). Both are EU member states — GDPR applies, which is good for consumer data-rights but also means the operator is subject to EU data-retention mandates. Pricing / fee structure: no `/fees` or `/pricing` path surfaced (all 404). The homepage at 70KB likely contains product tiers; Check pricing from the homepage or checkout flow. Coin coverage: homepage title references Bitcoin. Monero support is listed on peer directories, Twitter (`https://x.com/btcvps`), Telegram (`https://t.me/btc_vps`) — all surfaced from the homepage and /contact page. No Matrix or Simplex channel listed — standard for VPS providers. Tor mirror: BTCVPS advertises `btcvps22bw3ftklfklime6o6jwmf5rpoyb5fhxyzan5hpfnnumnpemqd.onion` off-site (kycnot + monerica); the clearnet does not currently carry the `Onion-Location` header so the onion is manual-discovery only. no privacy policy is published anywhere on the domain (the only legal pages are the ToS at `/legal/terms-of-service` and the AUP at `/legal/acceptable-use-policy`); (2) no AML disclosure at any path; (3) no operator background or `/about` page; (4) the off-site-advertised onion (`btcvps22b…onion`) is not announced via an `Onion-Location` header on the clearnet, so it is manual-discovery only. Among VPS providers in this directory, a documented privacy policy is the single largest trust-signal gap between B-grade and A-grade. Two peer listings (the A-grade threshold) exist but the documentation gap keeps this at B.

Caveats. The Terms of Service and Acceptable Use Policy pages exist at `/legal/terms-of-service` and `/legal/acceptable-use-policy` but their raw text was not captured in this review — the data-retention, account-termination, and prohibited-use clauses remain unread by this review. Existence is confirmed; content is not. The recommended `feature_tags` include `non_custodial`. A VPS provider manages customer infrastructure and holds prepaid balances, making 'non-custodial' inaccurate in the conventional sense. Some legal-URL discovery paths timed out during the audit.._error). All conventional, footer, and subdirectory privacy paths failed. This domain may have aggressive rate-limiting or The publicly-observable footprint: 10s-per-path budget hit a slow backend. Re-run a public audit with a higher per-path timeout or with a longer-timeout probe to confirm the privacy-policy gap is real and not a probe artifact.