# Joker.com privacy rating

German domain registrar run by CSL GmbH, offering hundreds of domain extensions, free DNS hosting with DNSSEC, and optional paid WHOIS privacy.

## Summary

Joker.com scores 45 out of 100 (grade D) on the domain registrars criteria. It meets 3 of 12 criteria: no ads or data sales, TLS configuration and two-factor login. It partly meets no trackers or telemetry, security headers, Free WHOIS privacy, honest renewal pricing and transfer and registry lock. It does not meet open source, independent audit, transparency report and tells users about requests. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://joker.com
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [Domain registrars](https://privacyratings.com/domain-registrars/)
- Grade: D (45/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | Partial | No third-party trackers were found, but the website loads a self-hosted Matomo tracker by default. | https://joker.com |
| No ads or data sales | Yes | Funded by paid domain registrations. No ads. | https://joker.com/domain/prices |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=joker.com&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=joker.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Free WHOIS privacy | Partial | WHOIS privacy is a paid add-on, available for most gTLDs. | https://joker.com/faq/books/jokercom-faq-en/page/privacy-services |
| Honest renewal pricing | Partial | Renewals cost more than first-year registration for many extensions, with .com renewing about a third higher. | https://joker.com/domain/prices |
| Two-factor login | Yes | TOTP authenticator apps are supported. | https://joker.com/faq/books/jokercom-faq-en/page/what-is-two-factor-authentication |
| Transfer and registry lock | Partial | Domains can be locked against unauthorized transfers. No registry lock service is documented. | https://joker.com/faq/books/jokercom-faq-en/page/domain-management-section |

Source: https://privacyratings.com/domain-registrars/joker-com/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/domain-registrars/joker-com.md