{
  "slug": "applied-privacy-dns",
  "category": "dns-resolvers",
  "name": "Applied Privacy DNS",
  "description": "Public DNS over HTTPS and DNS over TLS resolver run by the Foundation for Applied Privacy, a non-profit association in Vienna. It validates DNSSEC and uses QNAME minimisation.",
  "website": "https://applied-privacy.net/services/dns/",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "AT",
    "name": "Austria",
    "eyes": null,
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 57,
  "coverage": 100,
  "summary": "Applied Privacy DNS scores 57 out of 100 (grade D) on the DNS resolvers criteria. It meets 5 of 11 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, Encrypted DNS and DNSSEC validation. It partly meets security headers and no query logs. It does not meet open source, independent audit, transparency report and tells users about requests. It is based in Austria: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/dns-resolvers/applied-privacy-dns/",
  "markdown": "https://privacyratings.com/dns-resolvers/applied-privacy-dns/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source. The resolver configuration is not published."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://applied-privacy.net/privacy-policy/",
      "note": "The website logs requests without IP addresses and uses no third-party analytics. Only the external donation providers are outside its control."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://applied-privacy.net/donate/",
      "note": "Non-profit funded by donations and sponsors. No ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No transparency report or government request policy is published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=applied-privacy.net&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=applied-privacy.net",
      "note": "Grade B (70/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "encrypted_dns": {
      "title": "Encrypted DNS",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://applied-privacy.net/services/dns/",
      "note": "DoH and DoT endpoints are both documented."
    },
    "no_query_logs": {
      "title": "No query logs",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://applied-privacy.net/privacy-policy/",
      "note": "The policy states IP addresses and queries are not logged, only aggregated statistics. Not audited."
    },
    "dnssec_validation": {
      "title": "DNSSEC validation",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://applied-privacy.net/services/dns/",
      "note": "The documentation states the resolvers perform DNSSEC validation."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:38:28.215Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}