Quick answer
What does Ironatoll keep about its customers?
No logs: connection logs, traffic logs and the IP addresses of visitors and customers are never recorded, and the only trace of how you found us is a referral code, when the link you clicked had one. We keep only what running your server and billing need: your account number and optional email, your orders and top-ups (amount, coin, network, transaction ID, date), and each server’s name, plan, term, location, system, SSH public key, IP addresses and dates, plus, for a server ordered without a key, the temporary root password we set, which stops opening the server once you change it. What the datacenter’s own routers and switches record is beyond our control. Records leave our hands only under an order from a Panamanian court. Your account carries an email address only when you choose to give one. Neither the site nor the dashboard uses cookies, analytics or ad scripts, and at no point is your identity checked.
1. Who controls your data
DomaineGoat LLC, a limited liability company of Panama, operates Ironatoll and decides what happens to the data described here. The same company is the seller named in the terms of service. Questions about privacy go to [email protected].
2. What "no logs" covers
No logs: we keep no connection logs, no traffic logs and no IP addresses of visitors or customers, on the website, the dashboard or the servers.
Like every website, ours receives your IP address with each request your browser makes. We need it to send the reply, and we hold it briefly in memory to limit how many requests a single address may make. It is never written to disk or into a log file.
Your server sits behind network gear owned and run by its datacenter, not by Ironatoll, and that gear is subject to the law of the datacenter's country. Whether a hosting provider can see the data on a dedicated server deals with the physical side.
3. The records we keep
We hold a record only when a dedicated server cannot be run, renewed or billed without it. The third column gives each record's origin.
| Record | Why | Origin |
|---|---|---|
| Account number | Your login, and the thread that links your servers, orders and balance | Generated when the account is opened |
| Email address (optional) | The only way to get a forgotten account number back | Given by you, if you want |
| Transaction ID (TXID), coin, network, amount and date of each top-up | Finding the payment on its blockchain before the balance is credited | The blockchain record of your payment |
| Orders and movements on the balance | Billing each term, renewal and credit correctly | What you order |
| For each server: name, plan, term, system, location, IP addresses and the dates it was ordered, delivered, renewed, suspended or cancelled | Building the server, renewing it and billing it | Your order, plus the setup work our team records |
| SSH public key (optional) | Installed for root at setup and again at every reinstall, with password login left disabled | What you paste at checkout |
| Temporary root password (servers ordered with no SSH key) | Your first login; after you replace it with passwd, the old one opens nothing | Chosen by the team during setup |
| Referral code (only if your link carried one) | Attached to a top-up so the order can be traced to that link | The URL you arrived from |
| Dashboard language | Travels with each top-up so the team can answer in that language | The language you set in the dashboard |
| Support emails | Answering you, including RAID and reinstall requests | Whatever you write to us |
4. What we never ask for
- No KYC: no ID, selfie, documents, card or phone number are ever collected.
- Your name, postal address or date of birth: none of our forms has a field for them.
- Bank or card details, because crypto is the only accepted payment.
- Your private SSH key, root password or account number, whether by email or in a chat. Nobody from our team will ever ask for your account number, your root password or your private SSH key, by email or in a chat.
5. Cookies and what your browser stores
Cookies: none, on the website or in the dashboard. Neither carries analytics, advertising or tracking code, and the fonts come from Ironatoll's own server.
Some features keep small values in your browser's storage. They stay on your device until they expire or you delete them; the last column says when one of them is sent to us.
| Item | Where | Content | Sent to Ironatoll? |
|---|---|---|---|
| Site language | Website | The language picked from the menu | No |
| Session token | Dashboard | Keeps you logged in until you log out | Your account number travels with each dashboard request, over HTTPS |
| Cached account data | Dashboard | Account number, optional email, language and your open top-ups (reference, amount, coin, network, address, status), so a reloaded payment page keeps its state | We hold it already |
| Pending top-ups | Dashboard | Top-ups not yet acknowledged by our server, sent again until they are | Yes, until our server confirms them |
| New account number | Dashboard, current tab only | Kept until you confirm that you saved it | No |
| Dashboard language | Dashboard | Which language the dashboard displays | No |
If you share the computer, log out and clear the site's stored data before you leave it.
To price a payment in BTC, ETH, SOL or LTC in dollars, the payment page fetches the rate from a public price service, Coinbase first and CoinGecko when Coinbase is unavailable. That request carries no cookie, no referrer and nothing about your account, although the price service sees your IP address as any visited site would. USDT and USDC are taken at one dollar each, so a payment in either makes no rate request at all.
6. Crypto payments and public blockchains
A crypto payment ends up on a public blockchain, readable by anyone: amount, time and the addresses on both sides. That is why the transaction ID of a top-up connects it to everything the sending wallet did before. We match every incoming payment against public sanctions lists of blockchain addresses, and a payment sent from a listed address is never added to a balance. Banks and card networks play no part in any payment. The steps are laid out in how do I buy a dedicated server with Bitcoin.
7. The optional email address
An account works fully with no email address at all. Keep your account number safe, because signing in depends on it. An email on the account makes it recoverable; without one, nobody can retrieve a lost number. If you saved an email, the dashboard's recovery page sends the account number there. A message to support is kept, with the address it came from, so that we can answer it.
8. How records are used and who receives them
We use these records for five jobs: running your account, preparing and renewing servers, crediting payments, answering support and dealing with abuse reports. None of it is sold, and none of it feeds advertising.
Records are handed over on an order from a Panamanian court and on nothing else; DMCA notices and other foreign demands receive none. Whether a host can see the data on your dedicated server shows the limits of that rule, the datacenter's network among them.
9. How long records and disks are kept
- Server disks: when a server is not renewed, its disks are held for 7 days and wiped afterwards. Cancelling or reinstalling at your request wipes them as well.
- Browser storage: each value stays until you log out or delete it (section 5).
10. Your choices
Ironatoll works without an email address. Any server can be cancelled from the dashboard, and cancelling wipes its disks. For questions about the data on your account, write to [email protected] quoting an order reference (ORD-…), not the account number. Before paying, look at the Ironatoll pricing page, which lists the plan details every order is based on.
11. Security
Your account number is username and password in one, so keep it in a password manager. Root access over SSH: add your own public key at checkout and password login stays off, or leave it empty and get a temporary root password with your server, to change at first login. The private half of your SSH key stays on your own device; Ironatoll never needs it. Renting a dedicated server without KYC goes through what an order requires and what it never does.
12. Age
Only people who have turned 18 can open or hold an account. We never knowingly hold records about anyone under 18.
13. Changes and contact
This version of the policy is dated 30 October 2026. It may be revised, and the version in force is always the one dated at the top of the page. Write to [email protected] with any privacy question.