# Porkbun privacy rating

US domain registrar with free WHOIS privacy on most extensions, authenticator-app and security-key login, and an API.

## Summary

Porkbun scores 27 out of 100 (grade F) on the domain registrars criteria. It meets 1 of 12 criteria: two-factor login. It partly meets no ads or data sales, TLS configuration, Free WHOIS privacy, honest renewal pricing and transfer and registry lock. It does not meet open source, no trackers or telemetry, independent audit, transparency report, tells users about requests and security headers. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade F.

- Website: https://porkbun.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Analytics, Google Fonts (not scored), Google Tag Manager, LinkedIn Insight, Meta Pixel, Reddit Pixel, Trustpilot (not scored)
- Category: [Domain registrars](https://privacyratings.com/domain-registrars/)
- Grade: F (27/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The home page loads Google Analytics, Google Tag Manager, LinkedIn Insight, Meta Pixel and Reddit Pixel (automated test). |  |
| No ads or data sales | Partial | The privacy policy states personal data is shared with advertising partners for personalized ads, which may count as a sale. | https://porkbun.com/legal/agreement/privacy_policy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Partial | Grade A- | https://www.ssllabs.com/ssltest/analyze.html?d=porkbun.com&hideResults=on |
| Security headers | No | Grade F (0/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=porkbun.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Free WHOIS privacy | Partial | Free, but some registries (for example .us, .eu, .de, .uk) do not allow it. | https://porkbun.com/products/whois_privacy |
| Honest renewal pricing | Partial | Many extensions, including .com, renew at the registration price, but first-year sale prices renew higher. | https://porkbun.com/products/domains |
| Two-factor login | Yes | Authenticator apps and WebAuthn security keys are supported. | https://kb.porkbun.com/article/19-how-to-enable-two-factor-authentication |
| Transfer and registry lock | Partial | Domains are transfer-locked and must be unlocked before transfer. No registry lock service is documented. | https://kb.porkbun.com/article/173-how-to-use-domain-management |

Source: https://privacyratings.com/domain-registrars/porkbun/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/domain-registrars/porkbun.md