# GoDaddy privacy rating

US domain registrar and web hosting company offering domain registration, website building, hosting and business email.

## Summary

GoDaddy scores 36 out of 100 (grade F) on the domain registrars criteria. It meets 3 of 12 criteria: TLS configuration, Free WHOIS privacy and two-factor login. It partly meets transparency report, tells users about requests and transfer and registry lock. It does not meet open source, no trackers or telemetry, no ads or data sales, independent audit, security headers and honest renewal pricing. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade F.

- Website: https://www.godaddy.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Category: [Domain registrars](https://privacyratings.com/domain-registrars/)
- Also rated: [GoDaddy Email](https://privacyratings.com/email-providers/godaddy-email/) (Email providers)
- Grade: F (36/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy says Google Analytics and identifiers for personalized advertising are used. | https://www.godaddy.com/legal/agreements/privacy-policy |
| No ads or data sales | No | Personal data is shared with marketers and advertisers for personalized advertising. | https://www.godaddy.com/legal/agreements/privacy-policy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Partial | A subpoena policy explains how legal requests are handled. No request counts are published. | https://www.godaddy.com/legal/agreements/subpoena-policy |
| Tells users about requests | Partial | Customers are notified of valid civil subpoenas; no notice policy is published for law enforcement requests. | https://www.godaddy.com/legal/agreements/subpoena-policy |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=www.godaddy.com&hideResults=on |
| Security headers | No | Grade F (10/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.godaddy.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Free WHOIS privacy | Yes | Domain WHOIS privacy protection is included free with domain registrations. | https://www.godaddy.com/domains |
| Honest renewal pricing | No | A .com costs a few dollars in the first year for new customers and renews at about eight times that price. | https://www.godaddy.com/domains |
| Two-factor login | Yes | Authenticator apps, passkeys and security keys are supported, as well as SMS. | https://www.godaddy.com/help/enable-an-identity-verification-method-for-your-godaddy-account-42665 |
| Transfer and registry lock | Partial | Registrar transfer lock is on by default. No registry lock service is documented for regular domains. | https://www.godaddy.com/domains |

Source: https://privacyratings.com/domain-registrars/godaddy/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/domain-registrars/godaddy.md