# Server hosting privacy ratings

VPS, dedicated and cloud servers, including providers that allow mail servers.

**Our pick:** [DataPacket](https://privacyratings.com/server-hosting/datapacket/): Dedicated hardware on its own network, open port 25, configurable reverse DNS and native IPv6. Suited to running mail servers without sharing hardware with other customers.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [DataPacket](https://privacyratings.com/server-hosting/datapacket/) (our pick) | D (43/100) | United Kingdom (Five Eyes) | Dedicated servers, IP transit and bandwidth on its own global network, from DataCamp Limited in London. |
| [Exoscale](https://privacyratings.com/server-hosting/exoscale/) | C (65/100) | Switzerland | Swiss cloud provider, part of the A1 Group, offering compute instances, GPUs, managed Kubernetes, object storage and databases in European zones. |
| [UpCloud](https://privacyratings.com/server-hosting/upcloud/) | D (53/100) | Finland | Finnish cloud provider offering virtual servers, GPU servers, managed Kubernetes, databases and object storage in datacenters in Europe, North America, Asia and Australia. |
| [Google Cloud](https://privacyratings.com/server-hosting/google-cloud/) | D (50/100) | United States (Five Eyes) | Cloud computing platform from Google offering virtual machines (Compute Engine), Kubernetes, storage, databases and data analytics services. |
| [DigitalOcean](https://privacyratings.com/server-hosting/digitalocean/) | D (48/100) | United States (Five Eyes) | US cloud provider offering virtual machines (Droplets), Kubernetes, managed databases and object storage. |
| [Hetzner](https://privacyratings.com/server-hosting/hetzner/) | D (48/100) | Germany (Fourteen Eyes) | German provider of cloud servers, dedicated servers and storage, with its own datacenters in Germany and Finland and cloud locations in the US and Singapore. |
| [Njalla](https://privacyratings.com/server-hosting/njalla/) | D (48/100) | Costa Rica | Provider of VPS, domains and VPN run by njalla.srl in Costa Rica, with servers in Sweden. Accounts need only an email or XMPP address, and crypto payments are accepted. |
| [Amazon Web Services](https://privacyratings.com/server-hosting/amazon-web-services/) | D (45/100) | United States (Five Eyes) | Cloud computing platform from Amazon offering virtual servers (EC2), storage, databases and hundreds of other services in regions worldwide. |
| [Infomaniak](https://privacyratings.com/server-hosting/infomaniak/) | D (45/100) | Switzerland | Swiss provider of web hosting, VPS and OpenStack public cloud, running its own datacenters and network (AS29222). |
| [OVHcloud](https://privacyratings.com/server-hosting/ovhcloud/) | D (44/100) | France (Nine Eyes) | French provider of VPS, dedicated servers and public cloud, running its own datacenters in Europe, North America and Asia-Pacific. |
| [1984](https://privacyratings.com/server-hosting/1984/) | D (43/100) | Iceland | Icelandic provider of web hosting, VPS, email and free DNS, running on its own network (AS44925) and hardware. Accepts Bitcoin and Monero. |
| [Akamai Cloud (Linode)](https://privacyratings.com/server-hosting/linode/) | D (40/100) | United States (Five Eyes) | Cloud computing platform from Akamai, formerly Linode, offering virtual machines, Kubernetes, object storage and managed databases. |
| [Bunker](https://privacyratings.com/server-hosting/bunker/) | D (40/100) | France (Nine Eyes) | French cloud from France Nuage SAS offering virtual machines, managed open-source apps, PostgreSQL and S3-compatible storage in its own datacenters in France. |
| [Microsoft Azure](https://privacyratings.com/server-hosting/microsoft-azure/) | D (40/100) | United States (Five Eyes) | Cloud computing platform from Microsoft offering virtual machines, Kubernetes, storage, databases and AI services in regions worldwide. |
| [BuyVM](https://privacyratings.com/server-hosting/buyvm/) | F (38/100) | United Arab Emirates | VPS provider owned by Cloudzy, offering KVM slices, storage VPS, block storage and anycast IP addresses in Las Vegas, New York and Luxembourg. |
| [UltaHost](https://privacyratings.com/server-hosting/ultahost/) | F (38/100) | United States (Five Eyes) | Provider of shared hosting, VPS, VDS and dedicated servers, headquartered in Delaware with offices in the UK, Turkey and Dubai. |
| [Vultr](https://privacyratings.com/server-hosting/vultr/) | F (38/100) | United States (Five Eyes) | US cloud provider of virtual machines, bare metal servers and GPUs in many locations worldwide. |
| [Contabo](https://privacyratings.com/server-hosting/contabo/) | F (35/100) | Germany (Fourteen Eyes) | German provider of VPS, cloud and dedicated servers. Outgoing mail on port 25 is limited to about 25 messages per minute. |
| [RackNerd](https://privacyratings.com/server-hosting/racknerd/) | F (33/100) | United States (Five Eyes) | US provider of budget KVM VPS, dedicated and shared hosting in many North American and European datacenters. |
| [RareCloud](https://privacyratings.com/server-hosting/rarecloud/) | F (33/100) | Romania | Romanian provider of KVM VPS, OpenStack cloud VMs, managed Kubernetes and web hosting, with datacenters in Europe, the US and Asia. |
| [DartNode](https://privacyratings.com/server-hosting/dartnode/) | F (30/100) | United States (Five Eyes) | US provider of VPS and dedicated servers, run by Snaju Inc in Houston on its own network (AS399646) and hardware. |
| [Hostinger](https://privacyratings.com/server-hosting/hostinger/) | F (30/100) | Lithuania | Lithuanian provider of web hosting, VPS and website building services. Port 25 is open on VPS plans, limited to 5 messages per minute. |
| [netcup](https://privacyratings.com/server-hosting/netcup/) | F (30/100) | Germany (Fourteen Eyes) | German hosting provider offering virtual and root servers, web hosting, managed servers and domains, with datacenters in Germany, Austria, the Netherlands, the US and Singapore. |
| [Scaleway](https://privacyratings.com/server-hosting/scaleway/) | F (30/100) | France (Nine Eyes) | French cloud provider, part of the Iliad group, offering virtual instances, bare-metal servers, Kubernetes, storage and AI infrastructure in European datacenters. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?
- **Transparency report** (weight 2): Does the provider regularly publish how many government and legal requests it receives and how it responds?
- **Tells users about requests** (weight 1): Does the provider promise to tell users about requests for their data, unless a court forbids it?
- **TLS configuration** (weight 2, automated): Does the website pass the Qualys SSL Labs test with a grade of A or better?
- **Security headers** (weight 1, automated): Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
- **Modern web standards** (weight 1, automated): Does the website score 90% or higher on the Internet.nl website test?
- **Mail-friendly (port 25)** (weight 1): Is outbound port 25 open by default, or opened on request?
- **Reverse DNS** (weight 1): Can reverse DNS (PTR) records be set for IPv4 and IPv6?
- **IPv6** (weight 1): Is native IPv6 included?
- **Anonymous payment** (weight 1): Can servers be paid for with cryptocurrency or without identity checks?

Source: https://privacyratings.com/server-hosting/