Terms of service.
The agreement between you and NordBastion, in plain language — no dark corners, no clause that means the opposite of what it says.
This is the whole agreement. It is short on purpose. If a sentence here is unclear, read it the plain way — that is the way we meant it.
Who you are agreeing with
NordBastion is operated by NordBastion OÜ, a company registered in Estonia. These terms cover everything we provide: virtual private servers, dedicated servers, the private network they run on, and the control panel you manage them from. Using any of it means you accept what is written here.
We do not ask for your identity to open an account, and we never will. That is a deliberate design choice, not an oversight — and a couple of clauses below exist precisely because of it.
Your account
An account is an email address and a password. You are responsible for keeping both safe. Two-factor authentication is available in the panel, and we strongly recommend turning it on.
Because we hold no identity documents, no phone number and no proof of address, we cannot vouch for who is behind an account — which means we cannot restore access to an account whose credentials are lost. Keep your password, your recovery material and your PGP setup somewhere safe. This is the trade-off of a host that does not know who you are.
One account is for one person or one organisation. Do not share credentials, and do not resell access in a way that hides the real operator from us — not because we are nosy, but because handling abuse properly depends on being able to reach whoever is actually running the server.
Payment and balance
NordBastion runs on a prepaid balance. You top the balance up in cryptocurrency, and the cost of your servers is drawn from it as they run. There is no automatic card charge and no subscription that renews behind your back.
Cryptocurrency payments are final once confirmed on-chain. We cannot reverse a confirmed payment, because no one can. If a top-up is sent incorrectly, contact us from the panel and we will help wherever it is technically possible — but the chain is the chain.
Prices are shown in the panel before you commit. If a server's price ever changes, the change applies going forward only — never retroactively to time you have already paid for.
What we provide
We provide compute, storage and network capacity across four Nordic bastions, and the panel to run it. We aim for the availability published on the network and status pages, and we maintain the platform actively — including occasional scheduled maintenance, which we announce in advance whenever the work allows it.
What we provide is infrastructure. It is not a backup service. Snapshots and redundancy are tools we hand you; using them is on you.
What we expect from you
Use your servers for what you like, within the law that applies to you. You are responsible for your own legal compliance — we are not your lawyer, and we do not pre-screen what you run.
There is one hard limit, and a short list of things that keep the shared network usable for everyone. Both live in the Acceptable Use policy, which is part of this agreement. Read it — it is short, and it is honest about exactly where the line is.
Suspension and termination
We keep a deliberately light touch. We do not monitor the content of your servers, and we do not act as a content police — the Acceptable Use policy spells out the narrow set of cases where we step in, and they are narrow on purpose.
You can close your account at any time from the panel. When you do, any remaining prepaid balance is handled as described in the panel at closing time — balances are spent on service, not held hostage.
If we ever have to suspend or terminate a server, the Acceptable Use policy governs when and why. Outside of those cases, your server stays yours.
Your data and your privacy
We collect the minimum needed to run the service, and nothing more. What we hold, what we never hold, and how we answer legal requests is documented in the Transparency report, and the Warrant canary covers the case where we are legally gagged.
We do not log what runs inside your servers. We could not tell you what is on them, and we could not tell anyone else either.
Service “as is” and liability
The service is provided as it is. We work hard to keep it fast and online, but we do not promise it will be uninterrupted or flawless, and we are not liable for indirect or consequential losses — including lost data or lost revenue.
Where liability cannot be excluded, it is limited to the amount you paid NordBastion for the service in the three months before the issue arose. Back up anything you cannot afford to lose.
Changes to these terms
If these terms change, the change is announced — through the panel and on this page — before it takes effect. Nothing here changes in silence. That is not just a promise in the terms; it is the doctrine the whole company is built on.
The effective date at the top of this page always reflects the version you are reading.
Governing law
This agreement is governed by the law of Estonia, where NordBastion OÜ is registered, together with the Nordic jurisdictions the network operates from. Disputes that cannot be resolved directly are subject to the competent courts there.
Questions about these terms?
Raise them from your control panel and you will get a straight answer in writing. The pages below are the rest of the picture.