# DNSimple privacy rating

Paid managed DNS hosting and domain registrar with DNSSEC, secondary DNS, an API, a CLI and a Terraform provider.

## Summary

DNSimple scores 52 out of 100 (grade D) on the DNS hosting criteria. It meets 5 of 11 criteria: tells users about requests, TLS configuration, DNSSEC, API access and two-factor login. It partly meets no ads or data sales, transparency report and security headers. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://dnsimple.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Tag Manager, YouTube embed (not scored)
- Category: [DNS hosting](https://privacyratings.com/dns-hosting/)
- Grade: D (52/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The home page loads Google Tag Manager. |  |
| No ads or data sales | Partial | The privacy policy says third-party tracking technologies may be used for interest-based advertising. | https://dnsimple.com/privacy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Partial | The privacy policy says data is released only when required by law or properly served legal process. No request counts are published. | https://dnsimple.com/privacy |
| Tells users about requests | Yes | The privacy policy says users are notified of legal process for their data when possible and legally permissible. | https://dnsimple.com/privacy |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=dnsimple.com&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=dnsimple.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| DNSSEC | Yes | DNSSEC is included on every plan and turned on per domain with automatic key rotation. The DS record is added at the registrar. | https://support.dnsimple.com/articles/dnssec/ |
| API access | Yes | Full API access is included on every plan. | https://dnsimple.com/pricing |
| Two-factor login | Yes | Authenticator apps (TOTP) and WebAuthn security keys are supported. | https://support.dnsimple.com/articles/multi-factor-authentication/ |

Source: https://privacyratings.com/dns-hosting/dnsimple/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/dns-hosting/dnsimple.md