Minimise the account
The account model uses an email address and a password. Routine document checks, selfies and phone collection are outside that model. Every extra field should have a specific purpose and a retention reason.
Separate the layers
Account privacy, payment privacy and workload security are different responsibilities. An unpatched server can expose its data even when its provider has no passport copy. Public blockchain activity can remain visible even when signup is minimal.
Respect the workload boundary
KoalaVPS does not keep logs of activities carried out on customer servers. This policy concerns customer workloads; it does not remove the records needed to manage accounts, orders, payment reconciliation, support and account security. Logs you configure in your own operating system or applications remain under your control.
Be precise about limits
No-KYC is not immunity from applicable law or evidence that a provider has no records. KoalaVPS will not promise to ignore lawful obligations. The aim is fewer unnecessary records and clear rules for the information that genuinely has to exist.