# Quad9 privacy rating

Public DNS resolver run by the Swiss non-profit Quad9 Foundation that blocks known malicious domains and validates DNSSEC.

## Summary

Quad9 scores 65 out of 100 (grade C) on the DNS resolvers criteria. It meets 6 of 11 criteria: no trackers or telemetry, no ads or data sales, transparency report, TLS configuration, Encrypted DNS and DNSSEC validation. It partly meets security headers and no query logs. It does not meet open source, independent audit and tells users about requests. It is based in Switzerland: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.

- Website: https://quad9.net
- Jurisdiction: Switzerland. Not in the Five, Nine or Fourteen Eyes. GDPR-style data protection law.
- Home page trackers: none found
- Category: [DNS resolvers](https://privacyratings.com/dns-resolvers/)
- Grade: C (65/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. The resolver configuration and threat-blocking system are not published. |  |
| No trackers or telemetry | Yes | The website policy states no cookies, web beacons or tracking pixels are used. | https://quad9.net/privacy/website-policy/ |
| No ads or data sales | Yes | Non-profit funded by donations and sponsors. The policy states identifying data is not shared or sold. | https://quad9.net/privacy/policy/ |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Yes | Yearly summaries of law enforcement requests, updated quarterly. | https://quad9.net/about/transparency-report/ |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=quad9.net&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=quad9.net |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Encrypted DNS | Yes | DoH and DoT endpoints are listed for each service. | https://quad9.net/service/service-addresses-and-features/ |
| No query logs | Partial | The policy states user IP addresses are not stored with queries. Not audited. | https://quad9.net/privacy/policy/ |
| DNSSEC validation | Yes | DNSSEC validation is enabled on the recommended resolver addresses. | https://quad9.net/service/service-addresses-and-features/ |

Source: https://privacyratings.com/dns-resolvers/quad9/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/dns-resolvers/quad9.md