# Google Public DNS privacy rating

Free public DNS resolver run by Google at 8.8.8.8 and 8.8.4.4 that validates DNSSEC and supports DNS over HTTPS and DNS over TLS.

## Summary

Google Public DNS scores 45 out of 100 (grade D) on the DNS resolvers criteria. It meets 5 of 10 criteria: transparency report, tells users about requests, security headers, Encrypted DNS and DNSSEC validation. It partly meets no query logs. It does not meet open source, no trackers or telemetry, no ads or data sales and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: Mozilla HTTP Observatory grade A+.

- Website: https://developers.google.com/speed/public-dns
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Analytics, Google Fonts (not scored), Google Tag Manager
- Category: [DNS resolvers](https://privacyratings.com/dns-resolvers/)
- Also rated: [Gmail](https://privacyratings.com/email-providers/gmail/) (Email providers), [Gmail app](https://privacyratings.com/email-clients/gmail-app/) (Email clients), [Google Takeout](https://privacyratings.com/email-backup/google-takeout/) (Email backup tools), [Google Chrome](https://privacyratings.com/browsers/google-chrome/) (Browsers), [Google Search](https://privacyratings.com/search-engines/google-search/) (Search engines), [Google Authenticator](https://privacyratings.com/two-factor-authentication/google-authenticator/) (Two-factor authentication), [Google Messages](https://privacyratings.com/messengers/google-messages/) (Messengers), [Google Meet](https://privacyratings.com/video-calls/google-meet/) (Video calls), [Google Voice](https://privacyratings.com/virtual-phone-numbers/google-voice/) (Virtual phone numbers), [Google Cloud](https://privacyratings.com/server-hosting/google-cloud/) (Server hosting), [Chrome Remote Desktop](https://privacyratings.com/remote-desktop/chrome-remote-desktop/) (Remote desktop), [Google Keep](https://privacyratings.com/notes/google-keep/) (Notes), [Google Calendar](https://privacyratings.com/calendars/google-calendar/) (Calendars), [Google Docs](https://privacyratings.com/office-suites/google-docs/) (Office suites), [Google Forms](https://privacyratings.com/forms/google-forms/) (Forms and surveys), [Google Translate](https://privacyratings.com/translation/google-translate/) (Translation), [Google Gemini](https://privacyratings.com/ai-assistants/google-gemini/) (AI assistants), [Google Drive](https://privacyratings.com/cloud-storage/google-drive/) (Encrypted cloud storage), [Google Maps](https://privacyratings.com/maps/google-maps/) (Maps and navigation), [Google Analytics](https://privacyratings.com/web-analytics/google-analytics/) (Website analytics), [Google Home](https://privacyratings.com/smart-home/google-home/) (Smart home), [Google Nest Cam](https://privacyratings.com/security-cameras/google-nest-cam/) (Security cameras), [Fitbit](https://privacyratings.com/wearables/fitbit/) (Wearables and health), [Google Fit](https://privacyratings.com/fitness-trackers/google-fit/) (Fitness trackers), [Google Photos](https://privacyratings.com/photo-management/google-photos/) (Photo management)
- Grade: D (45/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The documentation website loads Google Analytics. | https://developers.google.com/speed/public-dns |
| No ads or data sales | No | Free service funded by Google's advertising business. The privacy page states DNS logs are not combined with other Google data for ads. | https://developers.google.com/speed/public-dns/privacy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Yes | Google publishes counts of government requests for user data twice a year. | https://transparencyreport.google.com/user-data/overview |
| Tells users about requests | Yes | Google states it notifies users before disclosing their information unless prohibited by law or in emergencies. | https://policies.google.com/terms/information-requests |
| TLS configuration | Not tested yet | Could not test: No endpoint could be graded |  |
| Security headers | Yes | Grade A+ (100/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=dns.google |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Encrypted DNS | Yes | DNS over HTTPS and DNS over TLS are both supported. | https://developers.google.com/speed/public-dns/docs/secure-transports |
| No query logs | Partial | Temporary logs with full IP addresses are kept for 24 to 48 hours. Sampled permanent logs keep only city or region. Not audited. | https://developers.google.com/speed/public-dns/privacy |
| DNSSEC validation | Yes | Google Public DNS is a validating resolver for all DNSSEC-signed zones. | https://developers.google.com/speed/public-dns/faq |

Source: https://privacyratings.com/dns-resolvers/google-public-dns/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/dns-resolvers/google-public-dns.md