# Hetzner privacy rating

German provider of cloud servers, dedicated servers and storage, with its own datacenters in Germany and Finland and cloud locations in the US and Singapore.

## Summary

Hetzner scores 48 out of 100 (grade D) on the server hosting criteria. It meets 4 of 12 criteria: no ads or data sales, TLS configuration, Reverse DNS and IPv6. It partly meets no trackers or telemetry, independent audit, security headers and mail-friendly (port 25). It does not meet open source, transparency report, tells users about requests and anonymous payment. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

- Website: https://www.hetzner.com
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Also rated: [Hetzner DNS](https://privacyratings.com/dns-hosting/hetzner-dns/) (DNS hosting)
- Grade: D (48/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | Partial | No third-party trackers, but website analytics use Matomo with cookies after consent. | https://www.hetzner.com/legal/privacy-policy/ |
| No ads or data sales | Yes | Funded by paid hosting, and the privacy policy says data is not passed to third parties unless specified. | https://www.hetzner.com/legal/privacy-policy/ |
| Independent audit | Partial | Only a one-page summary of the BSI C5 Type 2 audit and an ISO 27001 certificate are public. | https://files.hetzner.com/docs/BSI-C52020Typ2_Testat_2026_EN.pdf |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=www.hetzner.com&hideResults=on |
| Security headers | Partial | Grade B (75/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.hetzner.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | Partial | Ports 25 and 465 are blocked on cloud servers by default and can be unblocked on request after the first paid invoice. | https://docs.hetzner.com/cloud/servers/faq/ |
| Reverse DNS | Yes | rDNS entries for IPv4 and IPv6 are set in the Hetzner Console. | https://docs.hetzner.com/cloud/servers/cloud-server-rdns/ |
| IPv6 | Yes | Primary IPv6 addresses are free. | https://docs.hetzner.com/cloud/servers/primary-ips/overview/ |
| Anonymous payment | No | Cryptocurrency is not accepted. | https://docs.hetzner.com/general/billing-and-account-management/billing-at-hetzner/payment-overview/ |

New accounts must wait about a month before asking to open port 25.

Source: https://privacyratings.com/server-hosting/hetzner/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/hetzner.md