# Njalla privacy rating

Provider of VPS, domains and VPN run by njalla.srl in Costa Rica, with servers in Sweden. Accounts need only an email or XMPP address, and crypto payments are accepted.

## Summary

Njalla scores 48 out of 100 (grade D) on the server hosting criteria. It meets 5 of 12 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, IPv6 and anonymous payment. It partly meets security headers. It does not meet open source, independent audit, transparency report, tells users about requests, mail-friendly (port 25) and Reverse DNS. It is based in Costa Rica: Not in the Five, Nine or Fourteen Eyes. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.

- Website: https://njal.la/servers/
- Jurisdiction: Costa Rica. Not in the Five, Nine or Fourteen Eyes.
- Home page trackers: none found
- Category: [Server hosting](https://privacyratings.com/server-hosting/)
- Also rated: [Njalla](https://privacyratings.com/domain-registrars/njalla/) (Domain registrars)
- Grade: D (48/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | Yes | The terms say no data is collected beyond the email or XMPP address and password, and the website loads only its own scripts. | https://njal.la/tos/ |
| No ads or data sales | Yes | Funded by paid services, with data collection limited to account login details. | https://njal.la/tos/ |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or dedicated government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=njal.la&hideResults=on |
| Security headers | Partial | Grade B+ (80/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=njal.la |
| Modern web standards | Not tested yet | Not tested yet. |  |
| Mail-friendly (port 25) | No | Outgoing SMTP is blocked on all servers. | https://njal.la/servers/ |
| Reverse DNS | No | Not documented. The servers page and FAQ do not mention reverse DNS. | https://njal.la/servers/ |
| IPv6 | Yes | Every server includes one IPv4 and one IPv6 address. | https://njal.la/pricing/ |
| Anonymous payment | Yes | Bitcoin, Litecoin, Monero and Ethereum are accepted. | https://njal.la/faq/ |

Source: https://privacyratings.com/server-hosting/njalla/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/server-hosting/njalla.md