# NextDNS privacy rating

Configurable DNS resolver that blocks ads, trackers and malicious domains, with optional parental controls and per-user query logs.

## Summary

NextDNS scores 61 out of 100 (grade C) on the DNS resolvers criteria. It meets 5 of 11 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, Encrypted DNS and DNSSEC validation. It partly meets open source and no query logs. It does not meet independent audit, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C.

- Website: https://nextdns.io
- Source code: https://github.com/nextdns/nextdns
- License: MIT
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: none found
- Category: [DNS resolvers](https://privacyratings.com/dns-resolvers/)
- Grade: C (61/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | Only the client is open source. The resolver service is not. | https://github.com/nextdns/nextdns/blob/master/LICENSE |
| No trackers or telemetry | Yes | The Android app has no known trackers on Exodus, and the policy states user data is never shared. | https://reports.exodus-privacy.eu.org/en/reports/io.nextdns.NextDNS/latest/ |
| No ads or data sales | Yes | Funded by paid plans. The policy states data is never sold or shared. | https://nextdns.io/privacy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=nextdns.io&hideResults=on |
| Security headers | No | Grade C (55/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=nextdns.io |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Encrypted DNS | Yes | DoH and DoT are supported. | https://nextdns.io/ |
| No query logs | Partial | Queries are discarded unless the user turns on logging, with retention chosen by the user. Not audited. | https://nextdns.io/privacy |
| DNSSEC validation | Yes | DNS answers are validated with DNSSEC automatically. | https://nextdns.io/ |

Source: https://privacyratings.com/dns-resolvers/nextdns/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/dns-resolvers/nextdns.md