Free WHOIS privacy, where the registry allows it

What does WHOIS privacy hide in 2026?

It keeps your contact data out of public domain lookups. At BuyDomainsCrypto that is simple: we collect one email per domain, nothing else. Two changes shape how this works today:

• RDAP replaced WHOIS for gTLDs. Since 28 January 2025, gTLD registries and registrars no longer have to run the old WHOIS service. RDAP is now the reference. Anyone can look up a domain at lookup.icann.org.
• Personal data is redacted by default. ICANN's Registration Data Policy has applied since 21 August 2025. It keeps the personal data of registrants out of public lookups.

WHOIS privacy goes one step further. Where the registry allows it, the remaining public contact fields show privacy-service data instead of yours. Turn it on or off for each domain in My domains.

Which extensions allow WHOIS privacy?

Among the extensions we sell, the answer is always the same:

• Free privacy: .com, .net, .org, .io, .ai, .co, .xyz, .app, .dev and every other extension in the table.

Extensions where the registry keeps or publishes the holder's name and address (.de, .uk, .nl, .cc, .to, .ch, .pl, .be, .at, .cz, .nz, .fi) are sold registered in our name only: the registry and WHOIS show our company, never you. Extensions where privacy is forbidden or residency, nexus or an ID number is required (.us, .es, .eu, .fr, .it, .ca, .se) are not sold: our rule is one email per domain, nothing else.

The WHOIS privacy column below shows the rule for each extension, with its first-year price.

What does WHOIS privacy not do?

It hides your data from the public, not from the law. Privacy does not stop:

• A Panamanian court order. That is the only way your registrant data goes out, except urgent requests that ICANN rules require registrars to answer: an imminent threat to life, serious bodily injury, critical infrastructure, or child exploitation. A foreign lawyer, a private company or a foreign government must use Panamanian legal process.
• UDRP disputes. The domain is locked within 2 business days of a request from a UDRP provider, and the registrant details are confirmed to the dispute provider, as the UDRP requires.
• The strict exceptions. Phishing, malware, botnets and fraud that takes money from victims lead to suspension within 24 hours of a well-documented report. Child sexual abuse material leads to suspension immediately, with a report to the competent hotline or authority. Other complaints need a Panamanian court decision.
• ICANN checks. Privacy does not skip the email check: the registrant email is verified after registration, as ICANN rules require (within 15 days).

This is what makes privacy legitimate. A registrar that promises to ignore real abuse is not offering privacy: see the abuse page.

Can I hide my domain from the registry too?

Yes, with the premium option Registered in our name, at +$90 a year per domain. WHOIS privacy hides your email from the public, but you remain the registrant and the registry keeps your record. With Registered in our name, DomaineGoat LLC is the registrant of record: the registry and WHOIS show DomaineGoat LLC, never you, and the registry receives nothing about you.

You stay the beneficial owner, with full control, a free transfer code and the right to take the domain back in your name any time, free. We still keep one email, nothing else. Our policy does not change: it is anonymity towards the registry, not immunity.

Do I need to give an organisation name?

No. We collect one email per domain, nothing else, so there is no Organization field to fill in. Under ICANN's Registration Data Policy, when an organisation name is given, that organisation becomes the registrant: the legal holder of the domain. Since we never ask for it, the registrant is you, identified by your email, unless you choose Registered in our name, where DomaineGoat LLC is the registrant of record.

How do I check what is public for my domain?

Look the domain up at lookup.icann.org, ICANN's RDAP tool for gTLDs. It shows exactly what the public sees. Country extensions have their own lookup services.

If something shows that should not, check the WHOIS privacy switch in My domains, then write to [email protected]. Our privacy policy explains what we store and why.