6 MONTHS UPFRONT −28% · 1 YEAR UPFRONT −50%Compare plans
PrivacyNodes
FREQUENTLY ASKED QUESTIONS

Answers for the stack you run.

Find answers on offshore VPS, email-only contact, Monero and the SaaS stack you operate. Each topic links to the relevant workflow or policy.

Resources & application shape

How should I choose a configuration for my SaaS application?

List the services that will share the VPS, then measure them under representative traffic and background work. Include memory for the operating system and database, plus storage for growth and maintenance. The sizing guide explains how to turn those measurements into a resource budget. Build a workload budget.

Link to this answer
Can my API and job workers share a VPS?

Yes, as an architecture choice for software you operate. Budget the API, worker, database and release overlap together, and limit concurrency so exports cannot consume all available resources. Sharing one host also couples failures and maintenance. The API and workers scenario shows what to measure before choosing a profile or separating components.

Link to this answer
When should the database move to a separate service?

Consider separation when database memory, connections, maintenance or recovery needs cannot coexist comfortably with the application, or when independent access and failure boundaries matter. Separation introduces network and operational dependencies; it does not fix inefficient queries. Compare the workload evidence in the resource worksheet before changing architecture. No managed database is included in the PrivacyNodes catalogue.

Link to this answer
How much memory should I reserve for a deployment?

Reserve enough for the processes that actually overlap: a replacement API, an old worker finishing a job, migration tooling and ordinary database work. Measure a representative rehearsal instead of applying one universal percentage. The illustrative memory table includes a separate overlap allowance; its figures are assumptions to replace with your observations.

Link to this answer
Do containers automatically limit CPU and memory?

No. Docker containers have no resource constraints by default. Configure and test limits appropriate to each component, while leaving capacity for the host and concurrent tasks. A limit can prevent one process consuming everything, but it can also make the process fail under pressure. The sizing guide and official Docker reference explain the distinction.

Link to this answer
What should I measure before upgrading CPU?

Correlate host CPU with request timing, database or connection-pool waits, external calls and queue growth over the same interval. Low CPU and slow responses may point to waiting rather than insufficient compute. Profile a representative operation and change one variable before comparing again. Follow a slow request for a structured diagnostic example.

Link to this answer

Releases & access

Can I use a CI pipeline to deploy my application?

You can design a pipeline for infrastructure and access you control. Keep the reviewed artifact, configuration schema, migration sequence and verification steps explicit. This website does not expose a provisioning API or automatically connect your CI system to a VPS. Start with the release record and give its deployment identity only the permissions the job needs.

Link to this answer
What should a deployment health check verify?

Check a useful application path: authentication, a representative read, a small background job and access to its result where relevant. A listening port or HTTP 200 from a shallow endpoint cannot establish correct permissions, schema compatibility or worker behavior. Define expected outputs in advance and run checks with test accounts and neutralized external side effects. See release verification.

Link to this answer
Does rolling back application code undo a database migration?

No. A committed schema or data change remains unless another deliberate operation changes it. Older code may be incompatible with the new representation. Keep an additive compatibility release and identify when old writers become unsafe; never assume a down migration can reconstruct discarded data. The migration matrix separates code recovery from data recovery.

Link to this answer
How can staging avoid sending production emails or jobs?

Use independent credentials and queues, a capture sink or sandbox for outbound integrations, and disabled schedules unless explicitly exercised. Verify a test message reaches the intended sink and the application cannot consume production work. Naming a process staging does not enforce isolation. Review the staging boundary checklist before importing any data or starting a worker.

Link to this answer
Should deploy keys and administrator keys be separate?

Yes, design distinct identities and permissions so automation can perform a narrow release task while authorized humans retain an independent recovery path. A differently named key with identical broad access is not a narrower role. Review artifact trust, allowed commands, forwarding and revocation together in the deployment credential guide. Never put a private key into the configurator or support brief.

Link to this answer
Which ports should a containerized API publish?

Publish only the port and interface required by the intended request path, then test reachability from the right network. Keep databases, administration paths and diagnostics off public interfaces unless you have an explicit, reviewed reason. Docker publishing and a host firewall are separate controls. Read the container exposure guide before changing either.

Link to this answer
Does lowering DNS TTL make a cutover instantaneous?

No. A lower TTL can reduce how long some resolvers retain a previous answer after they receive it, but client caches, existing connections, certificate and application readiness still matter. Prepare a tested return path and observe the actual hostname behavior. The DNS cutover guide keeps those steps distinct.

Link to this answer

Workers & recovery

How should I choose worker concurrency?

Measure useful completions, oldest-job age, memory, database connections and API latency while gradually increasing active work in a test environment. Stop if throughput barely improves or the API degrades. Use bounded tasks, finite retries and an application result that tolerates repeat delivery. The worker budget guide develops an export job rather than prescribing one process count for every stack.

Link to this answer
What belongs in an application recovery inventory?

Include database and uploads, artifact and configuration versions, key-storage references, queues that contain durable work, DNS and external integrations. Record a selected recovery point, authorized access, a disposable test target and checks for records, files and permissions. Keep it reachable outside the original host. The rehearsal sheet distinguishes having a backup from restoring a working application.

Link to this answer
What does extra storage cover, and what needs its own backup?

Extra storage increases the configured working allocation for the host: application files, database, uploads, logs and temporary work still compete within it. Recovery copies should survive the failure boundary they protect against. A second copy on the same VPS does not provide that independence. Compare storage options in service facts and account for maintenance copies in your recovery plan.

Link to this answer
What should I record when a release fails?

Capture the UTC window, affected workflow, user impact, release revision, artifact, last working version and schema changes. Include expected and actual results, checks already attempted and a small redacted error sample. Record the rollback compatibility decision before retrying. The local incident brief helps prepare this information; it does not submit a ticket.

Link to this answer

Crypto & prepaid periods

What happens when I get payment details?

Confirm your configuration and contact email, then choose your billing period, asset and network to calculate payment details. Monero is the default only when no previous selection or quote can be restored. The reference is local: it does not register an order, confirm payment, send an email or provision a VPS. How payment details work.

Link to this answer
Which payment methods does the checkout support?

Crypto only: BTC on Bitcoin, XMR on Monero, LTC on Litecoin, ETH on Ethereum mainnet, TRX on TRON, SOL on Solana, USDT on Ethereum mainnet or TRON, and USDC on Ethereum mainnet. Each selection displays its specific asset and network. Supported crypto routes.

Link to this answer
Why does PrivacyNodes put Monero first?

Monero leads the crypto choices for the offshore developer workflow. A new visit starts with XMR, while an existing selection or quote is preserved. It is a payment preference, not a promise of anonymity, no logs or immunity. All supported assets, including USDT and USDC, use Kraken’s returned USD rate rather than an assumed price. How reference rates work.

Link to this answer
How long does a quote last, and what does its QR contain?

A quote lasts exactly one hour from creation. Reloading this tab does not restart that period. The QR contains only the receiving address; select the asset and network and enter the exact amount shown. After expiration, get new payment details. Quote expiry and address-only QR.

Link to this answer
Why do I need a contact email, and can I correct it?

One email provides the contact for future order and service communication. Confirm it before payment details are revealed. It is saved only in this tab’s session, separately from the quote. Editing temporarily hides instructions; saving a correction or cancelling the edit keeps the same reference, amount, rate and original deadline. Changing the actual configuration or crypto network requires a new quote. Review your configuration.

Link to this answer
Does this page confirm my payment?

No. A local reference, copied address or transaction hash does not establish payment confirmation. This page does not display verified payment or delivery status. Payment exceptions and refunds.

Link to this answer
How do the six-month and annual discounts work?

Pay for six months in one payment to save 28%, or twelve months in one payment to save 50%, compared with the monthly subtotal multiplied by the number of months. The discount includes recurring configuration options. The checkout shows the total before discount, savings and total payable. The full discounted period is paid at once. Period totals and discounts.

Link to this answer
Does paying in Monero hide secrets written by my application?

No. A payment method does not remove API tokens, credentials, logs, published files or application data from the systems where you place them. Keep secrets separate from deploy artifacts, restrict access, rotate them when necessary and redact them from incident records. The secret separation guide gives a planning workflow.

Link to this answer

Service scope & responsibilities

What does no-KYC mean for standard signup?

Standard signup does not ask for identity documents, a selfie, proof of address, a name or a phone number. Email is the only contact field; hostname and optional SSH public key are separate technical inputs. No-KYC does not mean that applicable legal obligations can never require additional information. No account is created by this local checkout. Contact and privacy details.

Link to this answer
Which operating systems and locations are available?

Choose Switzerland or Panama for your server; Switzerland is the default. Every profile uses the same price in both countries. The selected Linux image, specific facility and supplier inventory still require confirmation. Backup countries are separate and have not been supplied. Server countries and Linux images.

Link to this answer
Are backups or server management included?

One IPv4 address is included in the configuration. Daily backups with seven restore points are a separately priced option. Confirm the applicable retention, restoration procedure and service scope; no server management service is included in the catalogue. Rehearse application recovery.

Link to this answer
Are renewal prices, taxes, and refunds final?

The checkout displays the selected period’s price and discount calculation. Tax treatment, renewal terms, cancellation procedures, refund rules and seller details remain to be confirmed. Terms and seller information.

Link to this answer
What does offshore mean at PrivacyNodes?

PrivacyNodes offers offshore VPS for SaaS and API developers through an operator based in Panama, as declared by the owner. Servers can be configured in Switzerland or Panama. The operator’s base remains distinct from the country chosen for your VPS. Backup countries, specific facilities, the legal entity name and registration details are not yet supplied. Offshore hosting does not remove applicable legal obligations. Our approach to VPS hosting.

Link to this answer
Does a DMCA notice automatically suspend a VPS or disclose customer data?

A DMCA notice alone triggers neither automatic suspension nor automatic disclosure. Copyright complaints are assessed under applicable law; substantiated complaints may require action. PrivacyNodes complies with legally binding process applicable in Panama, including international procedures recognized there. This is not immunity from copyright or lawful requests. Read the complaints and legal-process policy.

Link to this answer
Can I buy a VPS without an ID or passport?

Standard PrivacyNodes signup asks for one email contact and does not request an identity document, selfie or proof of address. “No KYC” describes that standard contact step; it does not promise anonymity, immunity from applicable obligations, or a completed order. Choose the server country, plan and billing period, then read the selected asset and network before creating a one-hour payment quote. Review the purchase flow, privacy details and applicable-use terms.

Link to this answer

Working through a release issue?

Prepare a concise, redacted incident brief.

Open support guidance