Porkbun

Porkbun is an ICANN-accredited domain registrar.

2.9/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? Yes

0/10

Does the service allow you to permanently delete your personal data? Yes, by contacting someone

3/5

Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.

Score

Yes, by contacting someone

60%

Yes, using an automated mechanism

100%

N/A

The service doesn't collect any personal information.

100%

Citation

Porkbun will only retain the data we need in order to provide our products and services and as needed to fulfill our contracts. If you wish to have data removed that we rely upon to provide our products and services, you may request such data be deleted by emailing your request to privacy@porkbun.com. We will delete everything other than what’s required for contractual or required record-keeping purposes.

In most cases deleting your personal data will also require the deletion of your account and deletion or transfer out of any domains or products and services to another provider.

We will respond to any requests to remove personal data within 30 days.

Does the service allow third-party access to private personal data? Yes

0/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Citation

We utilize trusted third parties and contractors to provide our products and services and we may share your personal data with them, for instance:

payment processors such as PayPal or Stripe
fraud, abuse, and intrusion prevention services
companies that serve advertisements
companies that we contract to contact you on our behalf, such as Mailchimp or Google Suite. These communications may occur via email, text message, telephone, fax, chat rooms, social media, one-on-one chats, or the postal service. These may be initiated manually or in an automated fashion.
customer relationship management services
surveys and contest services

If we collect information from you in connection with a co-branded offer with one of our trusted partners, we’ll make sure we make it clear which partner’s privacy policy applies. If you believe your personal information has been submitted to us without your permission, please contact privacy@porkbun.com

If you connect to us from outside the country in which our servers, a partner’s servers, or a member of our staff are currently located, your data will pass across international borders.

[...]

We will reveal your personal information to law enforcement, governmental authorities and private parties as required by the law. We may additionally disclose your personal data to comply with a legal process or claims process, to protect an individual’s safety, or to comply with requests from 3rd parties with legitimate interests. So long as we’re not legally or procedurally barred from doing so, we’ll try to inform you when we have revealed your personal data in one of the above scenarios.

If you believe that you or a 3rd party you legally represent has a legitimate interest and right to access personal data currently being redacted by Porkbun AND that this right overrides the interests and fundamental rights of the data subject, please contact privacy@porkbun.com. Requests for access to non-public WHOIS information will be answered within 30 days.

Your activity on our site may be tracked by one or more analytics services such as Google Analytics. These sites may store cookies on your computer and use cookies to identify you. This data may be transmitted across international borders if those servers reside in a different country. The data we collect via these services may include information such as which pages you visited, how long you stayed, etc. In some instances, this data may contain information that could be used by Porkbun to personally identify you.

Porkbun may advertise or work with trusted third parties to advertise Porkbun products on other websites in a targeted fashion. These targeted ads may be served to you based on tracked interactions on the Porkbun or partner websites that might include cookies or javascript code served on the Porkbun website, often by a trusted third party.

Based on your account activity, we may market to you. We do utilize automated decision-making processes in order to decide how to market to you.

When does the policy allow law enforcement access to personal data? When reasonably requested

3/5

Score

Always

This includes cases in which law enforcement either runs the service or has a known backdoor into (or relationship with) the service.

Not specified

When reasonably requested

60%

Only when required by a court order or subpoena

80%

N/A (no personal data to share)

The service would have no personal data to share with law enforcement.

100%

Never (special legal jurisdiction)

The service operates in a jurisdiction in which sharing data with law enforcement is never required.

100%

Citation

Transparency

Does the policy outline the service's general security practices? Somewhat

1/3

Score

Somewhat

The policy provides only a very vague overview of its security practices.

30%

Yes

60%

Yes, including audits

"Reviews," "monitoring," etc. also count as audits.

80%

Yes, including independent audits

Independent "reviews," "monitoring," etc. also count as independent audits.

100%

N/A

The service doesn't collect any personal information.

100%

Citation

Porkbun utilizes industry-standard practices for safeguarding your private data, including encrypting your data. We utilize physical, electronic, and managerial procedures to help safeguard, prevent unauthorized access to, maintain data security of, and correctly use your information, although we do not guarantee its security.

We ensure our partners follow best-practices for safeguarding your data as well. For instance, click here to see our credit card processor Stripe’s privacy procedures: https://stripe.com/docs/security/stripe

Is the policy's history made available? Only the date it was last modified

3/5

Does the policy require users to be notified in case of a data breach? Not necessarily

0/7

Will affected users be notified when the policy is meaningfully changed? No

0/5

Collection

Does the service collect personal data from third parties? Yes

0/10

Is it clear why the service collects the personal data that it does? Yes

10/10

Score

Somewhat

30%

Mostly

70%

Yes

100%

N/A

The service doesn't collect any personal information.

100%

Citation

Here’s how we use the data:

normal operation of our products and services including domain registration and creating accounts
detection of fraud, abuse and intrusion, or the investigation of complaints about fraud or illegal activity
improving our products and services, including analysis of user behaviors in order to improve functionality or for marketing analysis
collection of aggregate data and statistics about use of our products and services
verifying your identity
communicating with you

We utilize trusted third parties and contractors to provide our products and services and we may share your personal data with them, for instance:

payment processors such as PayPal or Stripe
fraud, abuse, and intrusion prevention services
companies that serve advertisements
companies that we contract to contact you on our behalf, such as Mailchimp or Google Suite. These communications may occur via email, text message, telephone, fax, chat rooms, social media, one-on-one chats, or the postal service. These may be initiated manually or in an automated fashion.
customer relationship management services
surveys and contest services

If you connect to us from outside the country in which our servers, a partner’s servers, or a member of our staff are currently located, your data will pass across international borders.

[...]

Based on your account activity, we may market to you. We do utilize automated decision-making processes in order to decide how to market to you.

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? No

0/10

Does the policy list the personal data it collects? Yes, generally

7/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Citation

We typically collect private data collected from you when you voluntarily provide it to us, for instance, when you:

create an account. For example: email address, phone number, mailing address, fax number, username, and password.
purchase products and services. For example: credit card number and paypal account
contact us. For example: emailing support@porkbun.com or any other @porkbun.com email address, submitting a support request, or calling us on the telephone
sign up for a newsletter (email or postal address)
enroll in an affiliate, referral, or reseller program (for example: name, email, postal address, social media handles, biographical information)
participate in a company-sponsored forum or chat channel
initiate a domain transfer
upload or otherwise input data into one of our web hosting services.

We also collect and store personal information in less-obvious ways in order to provide our products and services. These include:

usernames, account numbers, purchase history, coupon usage history, login history, default contacts, and default payment methods
records of your interactions with Porkbun support or Porkbun abuse and notes on your account
domain-related information such as domain contacts, WHOIS privacy service usage, expiration dates, transfer history, registry statuses, and DNS records of various types
logged data and metadata that includes date and time information about when you accessed Porkbun or any of its products and services

We also utilize information freely offered by your web browser such as:

your browser name and browser version
your device type, make, and model
your operating system
browser settings and capabilities
the presence of plugins
your display size, color depth, and resolution
your specified language preference

Like many websites, we use "cookies." Cookies are alphanumeric identifiers that Porkbun and its partners transfer to your computer's hard drive through your web browser to enable our respective systems to recognize your browser. We and our partners use persistent, identifying cookies to remember your information and to link your activities to you as well as temporary cookies. While you can take steps to turn off, block or disable cookies, if you do, Porkbun may not function and appear as we have designed it. Nonetheless, if you want to take these steps, you can do so by following the instructions associated with your browser. Our cookies and the cookies collected and stored by our trusted partners are used for purposes that include:

to track sessions, shopping cart contents, applied coupons, items purchased, and browsing behavior including links and buttons clicked
to detect and prevent fraud and account intrusion
to detect unique devices
to improve site experience
to prevent fraud
-to collect analytics data and other data about how you use our products and services

The IP address of your computer is recorded and used for several purposes including:

to detect and prevent fraud and account intrusion
to customize your experience on the site
to approximate your location

Supplemental data may be received about you from data taken from public sources and other sources such as companies we have paid, and other trusted partners, using data we have already collected about you. We use this data to detect fraud, detect account intrusion, and to better deliver products and services. For example: we determine your location data from ipinfo.io based on your IP address for security purposes.

Last Updated

December 7, 2020

Sources

Source #1 ↗

Contributors

doamatto