# Cloudflare Registrar privacy rating

Domain registrar that charges registry cost with no markup, with free WHOIS redaction, transfer lock and one-click DNSSEC.

**Our pick.** Registry cost with no markup on registration or renewal, free WHOIS redaction, security-key login, and automatic DNSSEC with Cloudflare DNS.

**Keep in mind:** Domains registered with Cloudflare must use Cloudflare DNS, and not every domain extension is supported.

## Summary

Cloudflare Registrar scores 66 out of 100 (grade C) on the domain registrars criteria. It meets 8 of 12 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration, Free WHOIS privacy, honest renewal pricing, two-factor login and transfer and registry lock. It partly meets independent audit and security headers. It does not meet open source and no trackers or telemetry. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B+.

- Website: https://www.cloudflare.com/domains/
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Cloudflare Web Analytics (cookieless analytics), Google Tag Manager
- Category: [Domain registrars](https://privacyratings.com/domain-registrars/)
- Also rated: [Cloudflare Email Routing](https://privacyratings.com/email-forwarding/cloudflare-email-routing/) (Email forwarding and aliases), [1.1.1.1](https://privacyratings.com/mobile-security-apps/1-1-1-1/) (Mobile security apps), [Cloudflare](https://privacyratings.com/dns-resolvers/cloudflare/) (DNS resolvers), [Cloudflare DNS](https://privacyratings.com/dns-hosting/cloudflare-dns/) (DNS hosting), [Cloudflare Workers](https://privacyratings.com/app-hosting/cloudflare-workers/) (App hosting platforms), [Cloudflare Mesh](https://privacyratings.com/mesh-vpns/cloudflare-mesh/) (Mesh VPNs and private networks), [Cloudflare Web Analytics](https://privacyratings.com/web-analytics/cloudflare-web-analytics/) (Website analytics)
- Grade: C (66/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The home page loads Google Tag Manager (automated test). |  |
| No ads or data sales | Yes | Registrations are sold at cost, and the business is funded by paid Cloudflare plans. No ads. | https://www.cloudflare.com/domains/ |
| Independent audit | Partial | SOC 2, ISO 27001 and PCI reports exist but are only available to account administrators in the dashboard. | https://developers.cloudflare.com/fundamentals/reference/policies-compliances/compliance-docs/ |
| Transparency report | Yes | Semi-annual reports with counts of legal requests and responses. | https://www.cloudflare.com/transparency/ |
| Tells users about requests | Yes | The transparency report states customers are notified of legal requests unless legally prohibited. | https://cf-assets.www.cloudflare.com/slt3lc6tev37/zItVXCvbb4LZpYG4Uh10R/7b27bba39755f0a4344acb946977704d/2H_2025_Cloudflare_s_Transparency_Report_Legal-v2.pdf |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=dash.cloudflare.com&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=dash.cloudflare.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Free WHOIS privacy | Yes | WHOIS redaction is free and on by default. | https://www.cloudflare.com/domains/ |
| Honest renewal pricing | Yes | Registration, transfer and renewal are priced at registry and ICANN cost. | https://www.cloudflare.com/domains/ |
| Two-factor login | Yes | Security keys and authenticator apps are supported. | https://developers.cloudflare.com/fundamentals/user-profiles/2fa/ |
| Transfer and registry lock | Yes | Domains are locked against transfer by default. Registry lock is available for Enterprise customers. | https://www.cloudflare.com/domains/ |

Source: https://privacyratings.com/domain-registrars/cloudflare-registrar/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/domain-registrars/cloudflare-registrar.md