Answers for the stack you run.
Find answers on offshore VPS, email-only contact, Monero and the SaaS stack you operate. Each topic links to the relevant workflow or policy.
Resources & application shape
How should I choose a configuration for my SaaS application?
List the services that will share the VPS, then measure them under representative traffic and background work. Include memory for the operating system and database, plus storage for growth and maintenance. The sizing guide explains how to turn those measurements into a resource budget. Build a workload budget.
Link to this answerCan my API and job workers share a VPS?
Yes, as an architecture choice for software you operate. Budget the API, worker, database and release overlap together, and limit concurrency so exports cannot consume all available resources. Sharing one host also couples failures and maintenance. The API and workers scenario shows what to measure before choosing a profile or separating components.
Link to this answerWhen should the database move to a separate service?
Consider separation when database memory, connections, maintenance or recovery needs cannot coexist comfortably with the application, or when independent access and failure boundaries matter. Separation introduces network and operational dependencies; it does not fix inefficient queries. Compare the workload evidence in the resource worksheet before changing architecture. No managed database is included in the PrivacyNodes catalogue.
Link to this answerHow much memory should I reserve for a deployment?
Reserve enough for the processes that actually overlap: a replacement API, an old worker finishing a job, migration tooling and ordinary database work. Measure a representative rehearsal instead of applying one universal percentage. The illustrative memory table includes a separate overlap allowance; its figures are assumptions to replace with your observations.
Link to this answerDo containers automatically limit CPU and memory?
No. Docker containers have no resource constraints by default. Configure and test limits appropriate to each component, while leaving capacity for the host and concurrent tasks. A limit can prevent one process consuming everything, but it can also make the process fail under pressure. The sizing guide and official Docker reference explain the distinction.
Link to this answerWhat should I measure before upgrading CPU?
Correlate host CPU with request timing, database or connection-pool waits, external calls and queue growth over the same interval. Low CPU and slow responses may point to waiting rather than insufficient compute. Profile a representative operation and change one variable before comparing again. Follow a slow request for a structured diagnostic example.
Link to this answerReleases & access
Can I use a CI pipeline to deploy my application?
You can design a pipeline for infrastructure and access you control. Keep the reviewed artifact, configuration schema, migration sequence and verification steps explicit. This website does not expose a provisioning API or automatically connect your CI system to a VPS. Start with the release record and give its deployment identity only the permissions the job needs.
Link to this answerWhat should a deployment health check verify?
Check a useful application path: authentication, a representative read, a small background job and access to its result where relevant. A listening port or HTTP 200 from a shallow endpoint cannot establish correct permissions, schema compatibility or worker behavior. Define expected outputs in advance and run checks with test accounts and neutralized external side effects. See release verification.
Link to this answerDoes rolling back application code undo a database migration?
No. A committed schema or data change remains unless another deliberate operation changes it. Older code may be incompatible with the new representation. Keep an additive compatibility release and identify when old writers become unsafe; never assume a down migration can reconstruct discarded data. The migration matrix separates code recovery from data recovery.
Link to this answerHow can staging avoid sending production emails or jobs?
Use independent credentials and queues, a capture sink or sandbox for outbound integrations, and disabled schedules unless explicitly exercised. Verify a test message reaches the intended sink and the application cannot consume production work. Naming a process staging does not enforce isolation. Review the staging boundary checklist before importing any data or starting a worker.
Link to this answerShould deploy keys and administrator keys be separate?
Yes, design distinct identities and permissions so automation can perform a narrow release task while authorized humans retain an independent recovery path. A differently named key with identical broad access is not a narrower role. Review artifact trust, allowed commands, forwarding and revocation together in the deployment credential guide. Never put a private key into the configurator or support brief.
Link to this answerWhich ports should a containerized API publish?
Publish only the port and interface required by the intended request path, then test reachability from the right network. Keep databases, administration paths and diagnostics off public interfaces unless you have an explicit, reviewed reason. Docker publishing and a host firewall are separate controls. Read the container exposure guide before changing either.
Link to this answerDoes lowering DNS TTL make a cutover instantaneous?
No. A lower TTL can reduce how long some resolvers retain a previous answer after they receive it, but client caches, existing connections, certificate and application readiness still matter. Prepare a tested return path and observe the actual hostname behavior. The DNS cutover guide keeps those steps distinct.
Link to this answerWorkers & recovery
How should I choose worker concurrency?
Measure useful completions, oldest-job age, memory, database connections and API latency while gradually increasing active work in a test environment. Stop if throughput barely improves or the API degrades. Use bounded tasks, finite retries and an application result that tolerates repeat delivery. The worker budget guide develops an export job rather than prescribing one process count for every stack.
Link to this answerWhat belongs in an application recovery inventory?
Include database and uploads, artifact and configuration versions, key-storage references, queues that contain durable work, DNS and external integrations. Record a selected recovery point, authorized access, a disposable test target and checks for records, files and permissions. Keep it reachable outside the original host. The rehearsal sheet distinguishes having a backup from restoring a working application.
Link to this answerWhat does extra storage cover, and what needs its own backup?
Extra storage increases the configured working allocation for the host: application files, database, uploads, logs and temporary work still compete within it. Recovery copies should survive the failure boundary they protect against. A second copy on the same VPS does not provide that independence. Compare storage options in service facts and account for maintenance copies in your recovery plan.
Link to this answerWhat should I record when a release fails?
Capture the UTC window, affected workflow, user impact, release revision, artifact, last working version and schema changes. Include expected and actual results, checks already attempted and a small redacted error sample. Record the rollback compatibility decision before retrying. The local incident brief helps prepare this information; it does not submit a ticket.
Link to this answerCrypto & prepaid periods
What happens when I get payment details?
Confirm your configuration and contact email, then choose your billing period, asset and network to calculate payment details. Monero is the default only when no previous selection or quote can be restored. The reference is local: it does not register an order, confirm payment, send an email or provision a VPS. How payment details work.
Link to this answerWhich payment methods does the checkout support?
Crypto only: BTC on Bitcoin, XMR on Monero, LTC on Litecoin, ETH on Ethereum mainnet, TRX on TRON, SOL on Solana, USDT on Ethereum mainnet or TRON, and USDC on Ethereum mainnet. Each selection displays its specific asset and network. Supported crypto routes.
Link to this answerWhy does PrivacyNodes put Monero first?
Monero leads the crypto choices for the offshore developer workflow. A new visit starts with XMR, while an existing selection or quote is preserved. It is a payment preference, not a promise of anonymity, no logs or immunity. All supported assets, including USDT and USDC, use Kraken’s returned USD rate rather than an assumed price. How reference rates work.
Link to this answerHow long does a quote last, and what does its QR contain?
A quote lasts exactly one hour from creation. Reloading this tab does not restart that period. The QR contains only the receiving address; select the asset and network and enter the exact amount shown. After expiration, get new payment details. Quote expiry and address-only QR.
Link to this answerWhy do I need a contact email, and can I correct it?
One email provides the contact for future order and service communication. Confirm it before payment details are revealed. It is saved only in this tab’s session, separately from the quote. Editing temporarily hides instructions; saving a correction or cancelling the edit keeps the same reference, amount, rate and original deadline. Changing the actual configuration or crypto network requires a new quote. Review your configuration.
Link to this answerDoes this page confirm my payment?
No. A local reference, copied address or transaction hash does not establish payment confirmation. This page does not display verified payment or delivery status. Payment exceptions and refunds.
Link to this answerHow do the six-month and annual discounts work?
Pay for six months in one payment to save 28%, or twelve months in one payment to save 50%, compared with the monthly subtotal multiplied by the number of months. The discount includes recurring configuration options. The checkout shows the total before discount, savings and total payable. The full discounted period is paid at once. Period totals and discounts.
Link to this answerDoes paying in Monero hide secrets written by my application?
No. A payment method does not remove API tokens, credentials, logs, published files or application data from the systems where you place them. Keep secrets separate from deploy artifacts, restrict access, rotate them when necessary and redact them from incident records. The secret separation guide gives a planning workflow.
Link to this answerService scope & responsibilities
What does no-KYC mean for standard signup?
Standard signup does not ask for identity documents, a selfie, proof of address, a name or a phone number. Email is the only contact field; hostname and optional SSH public key are separate technical inputs. No-KYC does not mean that applicable legal obligations can never require additional information. No account is created by this local checkout. Contact and privacy details.
Link to this answerWhich operating systems and locations are available?
Choose Switzerland or Panama for your server; Switzerland is the default. Every profile uses the same price in both countries. The selected Linux image, specific facility and supplier inventory still require confirmation. Backup countries are separate and have not been supplied. Server countries and Linux images.
Link to this answerAre backups or server management included?
One IPv4 address is included in the configuration. Daily backups with seven restore points are a separately priced option. Confirm the applicable retention, restoration procedure and service scope; no server management service is included in the catalogue. Rehearse application recovery.
Link to this answerAre renewal prices, taxes, and refunds final?
The checkout displays the selected period’s price and discount calculation. Tax treatment, renewal terms, cancellation procedures, refund rules and seller details remain to be confirmed. Terms and seller information.
Link to this answerWhat does offshore mean at PrivacyNodes?
PrivacyNodes offers offshore VPS for SaaS and API developers through an operator based in Panama, as declared by the owner. Servers can be configured in Switzerland or Panama. The operator’s base remains distinct from the country chosen for your VPS. Backup countries, specific facilities, the legal entity name and registration details are not yet supplied. Offshore hosting does not remove applicable legal obligations. Our approach to VPS hosting.
Link to this answerDoes a DMCA notice automatically suspend a VPS or disclose customer data?
A DMCA notice alone triggers neither automatic suspension nor automatic disclosure. Copyright complaints are assessed under applicable law; substantiated complaints may require action. PrivacyNodes complies with legally binding process applicable in Panama, including international procedures recognized there. This is not immunity from copyright or lawful requests. Read the complaints and legal-process policy.
Link to this answerCan I buy a VPS without an ID or passport?
Standard PrivacyNodes signup asks for one email contact and does not request an identity document, selfie or proof of address. “No KYC” describes that standard contact step; it does not promise anonymity, immunity from applicable obligations, or a completed order. Choose the server country, plan and billing period, then read the selected asset and network before creating a one-hour payment quote. Review the purchase flow, privacy details and applicable-use terms.
Link to this answerWorking through a release issue?
Prepare a concise, redacted incident brief.