Domain privacy explained

A domain registration creates a public record. Privacy changes what that record shows, not who owns the domain. Understanding the difference prevents both false confidence and unnecessary fear.

What WHOIS is

WHOIS is the public lookup for a domain. It typically shows the registrar, the registration and expiration dates, the nameservers and contact details for the registrant and administrative contacts.

Registries and registrars publish different amounts of information, and some redact fields under local law. The record is not a complete history of the domain, and it is not a proof of ownership.

What domain privacy does

A privacy service replaces your contact details in the public record with substitute details, usually a forwarding address or a privacy provider's contact information. Messages sent to the substitute address can be forwarded to you.

• Your home address and personal phone number are not published in the public record.
• Your email address is replaced with a forwarding address where the service supports it.
• The registrar and registry still know who the registrant is.
• The domain still belongs to you and remains in your account.

What it does not do

• It does not make you anonymous to the registrar, the registry or law enforcement.
• It does not hide the domain from a trademark dispute or a legal request.
• It does not delete your data from every database.
• It does not protect the account from a weak password or a phishing email.
• It does not replace a business address or a role email.
• It is not available on every extension, including .us.

Privacy is one layer. Account security, a current contact email and auto-renew matter more for keeping the domain.

Where it is available

Eligibility can depend on the registrant type and the current registry policy. Confirm the setting at checkout and in the account after purchase.

Who benefits most

Privacy matters most when the registrant is a person rather than an organisation. A home address or personal mobile number in a public record can attract spam, unwanted calls or worse.

• Individuals and freelancers. Use privacy where it is available, and a role email for the registrant contact.
• Sole traders working from home. A business address or PO box is worth considering even where privacy is supported.
• Companies. Public contact details can support trust, but a generic role address is usually better than a personal inbox.
• Nonprofits. A public contact can help donors, but keep personal volunteer details out of the record.

How to enable and verify it

1. At checkout, look for the privacy setting. On eligible domains it may be added automatically.
2. After purchase, open the domain in the account and confirm the privacy status.
3. Look up the domain in a public WHOIS tool and check which contact details are shown.
4. If the record still shows your details, allow time for the registry to update, then contact support.
5. Confirm the setting again after a renewal or a transfer.

When privacy is not available

Some extensions do not offer a privacy service. For those, the practical alternatives are about what you publish, not whether you can hide.

• Use a business address or a PO box instead of a home address.
• Use a role email such as domains@ rather than a personal address.
• Use a separate business phone number if the record requires one.
• Keep the registrant organisation accurate, because a mismatch can complicate recovery.
• Ask support about the current options before you register.

This is general information, not legal advice. If a public record creates a safety or privacy concern, get advice that fits your situation.

Frequently asked questions

Last reviewed: 2026-10-19. This page describes current practice and general information. Prices and registry policies can change.