WHOIS privacy: free at Cloudflare and Porkbun, $19.99 at GoDaddy. Why?

What WHOIS privacy actually does

ICANN requires registrars to collect and publish certain data for every domain — name, organization, address, phone, email of the registrant, administrative contact, and technical contact. This public database is queryable via WHOIS.

WHOIS privacy (also called "domain privacy" or "proxy registration") replaces your personal data in that public record with the registrar's proxy service. Instead of:

Registrant Name: Jane Doe
Registrant Organization: Jane Doe Design LLC
Registrant Street: 123 Main St
Registrant City: Portland
Registrant Phone: +1.5035551234
Registrant Email: jane@janedoedesign.com

You get:

Registrant Name: Domains By Proxy
Registrant Organization: Domains By Proxy LLC
Registrant Street: 100 S Mill Ave, Suite 1600
Registrant City: Tempe
Registrant Phone: +1.4806242599
Registrant Email: noreply@domainsbyproxy.com

Your contact data stays with the registrar; legal process still reaches you if served. But spammers scraping WHOIS, old-school enumeration, and casual lookups all hit the proxy instead.

Why some registrars charge for it

Charging for WHOIS privacy dates to the early 2000s, when ICANN required public WHOIS and the proxy service involved real overhead (manual forwarding of legal notices). That overhead is now ~$0 — automated, one database column — but the addon pricing persists because it is pure margin at zero delivery cost.

Cloudflare's 2015 decision to include WHOIS privacy free was notable because it signaled the end of the paid-addon era. Most registrars that compete on price (Porkbun, Namecheap, Hover, Gandi, Name.com) followed within a few years.

Registrars that still charge (GoDaddy, Network Solutions, Register.com, IONOS, Web.com) are either positioned as premium enterprise (where the $20 is a rounding error on the business customer's budget) or rely on customers who do not comparison-shop.

Price comparison across registrars

As of April 2026, WHOIS privacy cost per domain per year:

Multi-domain portfolios compound: a 20-domain user at Network Solutions is paying $400/year for something that is free at Cloudflare. Over 10 years, that is the cost of a mid-range laptop.

The limits of WHOIS privacy

WHOIS privacy hides your data from public WHOIS lookups. It does not:

• Hide your data from the registrar. They still have your real name, address, and payment info. A breach or a subpoena exposes you.
• Apply to all TLDs. Some ccTLDs (e.g., .us, .ca, .uk) have their own rules. .us does not permit proxy privacy at all for US citizens.
• Protect from GDPR-redacted WHOIS bypass. Post-2018, EU registrars redact most WHOIS data regardless. US-based lookups of EU domains may still show limited data, but the legal ability to request full data still exists.
• Survive legal process. Subpoenas, civil discovery, and law enforcement requests all pierce WHOIS privacy via the registrar.
• Prevent deanonymization via other channels. Site analytics, contact forms, and payment data can all tie the domain back to you even if WHOIS says "Proxy."

When you need stronger than the checkbox

If your threat model goes beyond "spam lookups" — investigative journalists, activists, sensitive businesses — the proxy-registrar model (Njalla, Orangewebsite-style) or offshore-jurisdiction registration is the next tier. Njalla, for example, registers the domain in Njalla's own name and contractually obligates itself to pass renewals to you; if subpoenaed, Njalla has to fight its own name on the record.

At LaunchPad Host, we offer:

• Standard WHOIS privacy free by default on all domain registrations.
• Crypto payment (BTC, ETH, XMR, LTC) so our internal data tied to the domain does not include a payment-identity linkage.
• Minimal signup fields — we do not collect a physical address or phone number unless ICANN requires it for the specific TLD.
• Nonexistent marketing profile — we do not share or sell customer data to third parties. Our privacy policy documents this.

We are not a proxy registrar in the Njalla sense — we do not register domains in our own name. That model has its own legal complications (what happens if the registrar fails?). The standard WHOIS privacy + minimal data + crypto combo covers most practical privacy use cases.