{
  "slug": "hetzner",
  "category": "server-hosting",
  "name": "Hetzner",
  "description": "German provider of cloud servers, dedicated servers and storage, with its own datacenters in Germany and Finland and cloud locations in the US and Singapore.",
  "website": "https://www.hetzner.com",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "DE",
    "name": "Germany",
    "eyes": "Fourteen Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 48,
  "coverage": 100,
  "summary": "Hetzner scores 48 out of 100 (grade D) on the server hosting criteria. It meets 4 of 12 criteria: no ads or data sales, TLS configuration, Reverse DNS and IPv6. It partly meets no trackers or telemetry, independent audit, security headers and mail-friendly (port 25). It does not meet open source, transparency report, tells users about requests and anonymous payment. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/server-hosting/hetzner/",
  "markdown": "https://privacyratings.com/server-hosting/hetzner/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://www.hetzner.com/legal/privacy-policy/",
      "note": "No third-party trackers, but website analytics use Matomo with cookies after consent."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.hetzner.com/legal/privacy-policy/",
      "note": "Funded by paid hosting, and the privacy policy says data is not passed to third parties unless specified."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://files.hetzner.com/docs/BSI-C52020Typ2_Testat_2026_EN.pdf",
      "note": "Only a one-page summary of the BSI C5 Type 2 audit and an ISO 27001 certificate are public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No transparency report or government request policy is published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=www.hetzner.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=www.hetzner.com",
      "note": "Grade B (75/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "port_25": {
      "title": "Mail-friendly (port 25)",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://docs.hetzner.com/cloud/servers/faq/",
      "note": "Ports 25 and 465 are blocked on cloud servers by default and can be unblocked on request after the first paid invoice."
    },
    "reverse_dns": {
      "title": "Reverse DNS",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://docs.hetzner.com/cloud/servers/cloud-server-rdns/",
      "note": "rDNS entries for IPv4 and IPv6 are set in the Hetzner Console."
    },
    "ipv6": {
      "title": "IPv6",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://docs.hetzner.com/cloud/servers/primary-ips/overview/",
      "note": "Primary IPv6 addresses are free."
    },
    "anonymous_payment": {
      "title": "Anonymous payment",
      "weight": 1,
      "answer": "no",
      "evidence": "https://docs.hetzner.com/general/billing-and-account-management/billing-at-hetzner/payment-overview/",
      "note": "Cryptocurrency is not accepted."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T07:01:35.849Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}