# Orange Website privacy rating

Icelandic hosting company that also registers domains, asks only for an email address at sign-up and accepts Bitcoin.

## Summary

Orange Website scores 50 out of 100 (grade D) on the domain registrars criteria. It meets 6 of 12 criteria: no ads or data sales, tells users about requests, TLS configuration, Free WHOIS privacy, honest renewal pricing and two-factor login. It partly meets transparency report. It does not meet open source, no trackers or telemetry, independent audit, security headers and transfer and registry lock. It is based in Iceland: Not in the Five, Nine or Fourteen Eyes; EEA member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade F.

- Website: https://orangewebsite.com/domains/domain-price-list
- Jurisdiction: Iceland. Not in the Five, Nine or Fourteen Eyes. EEA member (GDPR).
- Home page trackers: none found
- Category: [Domain registrars](https://privacyratings.com/domain-registrars/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The home page loads Google Analytics. |  |
| No ads or data sales | Yes | Funded by paid hosting and domain services. No ads. | https://orangewebsite.com/domains/domain-price-list |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | Partial | The privacy policy states data is released only on a valid Icelandic court order. No request counts are published. | https://orangewebsite.com/docs/privacy-policy.php |
| Tells users about requests | Yes | The FAQ states clients are informed every time a third party contacts the company about them. | https://orangewebsite.com/pages/faq |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=www.orangewebsite.com&hideResults=on |
| Security headers | No | Grade F (0/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.orangewebsite.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Free WHOIS privacy | Yes | Private WHOIS is listed among the features included with every domain. | https://orangewebsite.com/domains/domain-price-list |
| Honest renewal pricing | Yes | One flat yearly price per extension, with no separate first-year discount. | https://orangewebsite.com/domains/domain-price-list |
| Two-factor login | Yes | Two-factor authentication is available for the client area. | https://orangewebsite.com/company/secure-hosting |
| Transfer and registry lock | No | No transfer lock or registry lock option is documented. |  |

Source: https://privacyratings.com/domain-registrars/orange-website/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/domain-registrars/orange-website.md