WHOIS privacy (also called WHOIS protection, domain privacy, or identity protect) hides your personal contact details from the public WHOIS database — the registry’s index of who owns every domain.
What WHOIS shows by default
Without privacy protection, your domain registration record displays:
- Your full name
- Your address
- Your email address
- Your phone number
This information is publicly accessible to anyone who looks up your domain. It’s been scraped by spammers, sold by data brokers, and used for targeted phishing since the WHOIS system was created.
What WHOIS privacy does
WHOIS privacy replaces your personal details with the registrar’s proxy contact information. Instead of your name and home address, the public record shows something like “WhoisGuard Protected” and a Namecheap proxy email address. Legitimate correspondence is forwarded to you; spam is filtered.
Why it should be free in 2026
GDPR (the EU General Data Protection Regulation), effective May 2018, required that personal data of EU residents not be publicly exposed without a lawful basis. Displaying name, address, and phone number in a public database failed that test for EU registrants.
ICANN subsequently redacted this data from the public WHOIS for GDPR-covered registrants. In practice, most registrars extended the redaction to all registrants — because the legal risk of selective redaction outweighed the revenue from the WHOIS-privacy upsell.
The registrar that still charges for WHOIS privacy in 2026 is selling you something the law already gave you. GoDaddy’s “Ultimate Domain Protection & Security” at $9.99/yr is the clearest example: it’s a product built on a legal obligation they would have had to fulfil for free anyway.
Who charges and who doesn’t
| Registrar | WHOIS privacy cost |
|---|---|
| Cloudflare | Free |
| Porkbun | Free |
| Namecheap | Free (WhoisGuard) |
| Spaceship | Free |
| Namesilo | Free |
| GoDaddy | $9.99/yr |
| Network Solutions | $9.99/yr |
The “charges for it” list is short and getting shorter. Both registrars on it have legacy business models built on the pre-GDPR pricing era.
Why it matters when picking a registrar
Any registrar still charging for WHOIS privacy in 2026 is revealing something about their pricing philosophy: they will charge for regulatory minimums as premium features. If they do it on WHOIS privacy, they do it elsewhere. Use the WHOIS privacy policy as a quick filter — if they charge for it, look harder at their other pricing.