# netcup privacy rating

German hosting provider offering virtual and root servers, web hosting, managed servers and domains, with datacenters in Germany, Austria, the Netherlands, the US and Singapore.

## Summary

netcup scores 30 out of 100 (grade F) on the server hosting criteria. It meets 2 of 12 criteria: Reverse DNS and IPv6. It partly meets no ads or data sales, independent audit, TLS configuration, security headers and mail-friendly (port 25). It does not meet open source, no trackers or telemetry, transparency report, tells users about requests and anonymous payment. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade B+.

- Website: https://www.netcup.com/en
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Grade: F (30/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The privacy policy describes retargeting tags, pixels and cookies from advertising platforms and social networks. | https://www.netcup.com/en/contact/data-privacy |
| No ads or data sales | Partial | Website usage data is shared with advertising networks for retargeting. | https://www.netcup.com/en/contact/data-privacy |
| Independent audit | Partial | netcup states annual ISO 27001 and ISO 27701 certification, but no audit report is public. | https://www.netcup.com/en |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Partial | Grade A- | https://www.ssllabs.com/ssltest/analyze.html?d=www.customercontrolpanel.de&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=www.customercontrolpanel.de |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | Partial | A default firewall policy blocks SMTP, and customers can delete it themselves in the Server Control Panel. | https://www.netcup.com/en/helpcenter/documentation/server/firewall |
| Reverse DNS | Yes | Reverse DNS for IPv4 and IPv6 addresses is set in the Server Control Panel. | https://www.netcup.com/en/helpcenter/documentation/server/network-server |
| IPv6 | Yes | VPS plans include a static IPv4 address and a /64 IPv6 subnet by default. | https://www.netcup.com/en/helpcenter/documentation/server/network-configuration |
| Anonymous payment | No | Payment is by bank transfer, PayPal, card or SEPA direct debit. Cryptocurrency is not accepted. | https://www.netcup.com/en/helpcenter/documentation/general/payment-methods |

Source: https://privacyratings.com/server-hosting/netcup/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/netcup.md