Porkbun

Porkbun is an ICANN-accredited domain registrar

This page is not published. While you can access it via its direct link, it is not yet displayed on the website.

Transparency

Does the policy require users to be notified in case of a data breach? No

0/7

Decided May 18, 2020 (revision history). This question accounts for 8% of the final score.

Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.

Possible Options

No0/7
Yes, eventually5/7
Yes, within 72 hours7/7
N/A (the service collects so little personal data that notification would not be possible)7/7

Note

This policy does not require the service to alert users in case of a data breach

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Will affected users be notified when the policy is meaningfully changed? No

0/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Possible Options

No0/5
Yes5/5
N/A (no personal data—or contact information—collected)5/5

Note

There is no requirement to inform users of updates

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Is the policy's history made available? Only the date it was last modified

3/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Possible Options

No0/5
Only the date it was last modified3/5
Yes, with revisions or a change-log5/5

Citation

The Privacy Policy is effective May 25, 2018.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the policy outline the service's general security practices? Somewhat

1/3

Decided May 18, 2020 (revision history). This question accounts for 4% of the final score.

The policy provides only a very vague overview of its security practices.

Possible Options

No0/3
Somewhat1/3
Yes2/3
Yes, including audits2.5/3
N/A (no personal data collected)3/3
Yes, including independent audits3/3

Citation

Porkbun utilizes industry-standard practices for safeguarding your private data, including encrypting your data. We utilize physical, electronic, and managerial procedures to help safeguard, prevent unauthorized access to, maintain data security of, and correctly use your information, although we do not guarantee its security.

We ensure our partners follow best-practices for safeguarding your data as well. For instance, click here to see our credit card processor Stripe’s privacy procedures: https://stripe.com/docs/security/stripe

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Collection

Is it clear why the service collects the personal data that it does? Yes

10/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

This question deals with transparency. Even if the service uses data for reasons that aren't ideal for privacy, provided they list all of those uses, the service can still receive full credit for this question. However, if they are not explicit about their uses (by employing language like "such as"), a lower score is assigned.

Possible Options

No0/10
Somewhat4/10
Mostly7/10
Yes10/10
No personal data is collected10/10

Citation

Here’s how we use the data: - normal operation of our products and services including domain registration and creating accounts - detection of fraud, abuse and intrusion, or the investigation of complaints about fraud or illegal activity - improving our products and services, including analysis of user behaviors in order to improve functionality or for marketing analysis - collection of aggregate data and statistics about use of our products and services - verifying your identity - communicating with you

We utilize trusted third parties and contractors to provide our products and services and we may share your personal data with them, for instance:

  • payment processors such as PayPal or Stripe
  • fraud, abuse, and intrusion prevention services
  • companies that serve advertisements
  • companies that we contract to contact you on our behalf, such as Mailchimp or Google Suite. These communications may occur via email, text message, telephone, fax, chat rooms, social media, one-on-one chats, or the postal service. These may be initiated manually or in an automated fashion.
  • customer relationship management services
  • surveys and contest services

If we collect information from you in connection with a co-branded offer with one of our trusted partners, we’ll make sure we make it clear which partner’s privacy policy applies. If you believe your personal information has been submitted to us without your permission, please contact [email protected]

If you connect to us from outside the country in which our servers, a partner’s servers, or a member of our staff are currently located, your data will pass across international borders.

[...]

We will reveal your personal information to law enforcement, governmental authorities and private parties as required by the law. We may additionally disclose your personal data to comply with a legal process or claims process, to protect an individual’s safety, or to comply with requests from 3rd parties with legitimate interests. So long as we’re not legally or procedurally barred from doing so, we’ll try to inform you when we have revealed your personal data in one of the above scenarios.

If you believe that you or a 3rd party you legally represent has a legitimate interest and right to access personal data currently being redacted by Porkbun AND that this right overrides the interests and fundamental rights of the data subject, please contact [email protected] Requests for access to non-public WHOIS information will be answered within 30 days.

Your activity on our site may be tracked by one or more analytics services such as Google Analytics. These sites may store cookies on your computer and use cookies to identify you. This data may be transmitted across international borders if those servers reside in a different country. The data we collect via these services may include information such as which pages you visited, how long you stayed, etc. In some instances, this data may contain information that could be used by Porkbun to personally identify you.

Porkbun may advertise or work with trusted third parties to advertise Porkbun products on other websites in a targeted fashion. These targeted ads may be served to you based on tracked interactions on the Porkbun or partner websites that might include cookies or javascript code served on the Porkbun website, often by a trusted third party.

Based on your account activity, we may market to you. We do utilize automated decision-making processes in order to decide how to market to you.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the policy list the personal data it collects? Yes, generally

7/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

Possible Options

No0/10
Only summarily3/10
Yes, generally7/10
Yes, exhaustively10/10
N/A (no personal information is collected)10/10

Citation

We typically collect private data collected from you when you voluntarily provide it to us, for instance, when you:

  • create an account. For example: email address, phone number, mailing address, fax number, username, and password.
  • purchase products and services. For example: credit card number and paypal account
  • contact us. For example: emailing [email protected] or any other @porkbun.com email address, submitting a support request, or calling us on the telephone
  • sign up for a newsletter (email or postal address) enroll in an affiliate, referral, or reseller program (for example: name, email, postal address, social media handles, biographical information)
  • participate in a company-sponsored forum or chat channel
  • initiate a domain transfer
  • upload or otherwise input data into one of our web hosting services.

We also collect and store personal information in less-obvious ways in order to provide our products and services. These include:

  • usernames, account numbers, purchase history, coupon usage history, login history, default contacts, and default payment methods
  • records of your interactions with Porkbun support or Porkbun abuse and notes on your account
  • domain-related information such as domain contacts, WHOIS privacy service usage, expiration dates, transfer history, registry statuses, and DNS records of various types
  • logged data and metadata that includes date and time information about when you accessed Porkbun or any of its products and services

We also utilize information freely offered by your web browser such as:

  • your browser name and browser version
  • your device type, make, and model
  • your operating system
  • browser settings and capabilities
  • the presence of plugins
  • your display size, color depth, and resolution
  • your specified language preference

Like many websites, we use "cookies." Cookies are alphanumeric identifiers that Porkbun and its partners transfer to your computer's hard drive through your web browser to enable our respective systems to recognize your browser. We and our partners use persistent, identifying cookies to remember your information and to link your activities to you as well as temporary cookies. While you can take steps to turn off, block or disable cookies, if you do, Porkbun may not function and appear as we have designed it. Nonetheless, if you want to take these steps, you can do so by following the instructions associated with your browser. Our cookies and the cookies collected and stored by our trusted partners are used for purposes that include:

  • to track sessions, shopping cart contents, applied coupons, items purchased, and browsing behavior including links and buttons clicked
  • to detect and prevent fraud and account intrusion
  • to detect unique devices
  • to improve site experience
  • to prevent fraud -to collect analytics data and other data about how you use our products and services

The IP address of your computer is recorded and used for several purposes including:

  • to detect and prevent fraud and account intrusion
  • to customize your experience on the site
  • to approximate your location

Supplemental data may be received about you from data taken from public sources and other sources such as companies we have paid, and other trusted partners, using data we have already collected about you. We use this data to detect fraud, detect account intrusion, and to better deliver products and services. For example: we determine your location data from ipinfo.io based on your IP address for security purposes.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service collect personal data from third parties? Yes

0/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

This includes the use of data brokers and independent verification authorities (such as background check providers).

Possible Options

Yes0/10
Only for critical data7/10
No10/10

Citation

Supplemental data may be received about you from data taken from public sources and other sources such as companies we have paid, and other trusted partners, using data we have already collected about you. We use this data to detect fraud, detect account intrusion, and to better deliver products and services. For example: we determine your location data from ipinfo.io based on your IP address for security purposes.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service allow the user to control whether personal data is used or collected for non-critical purposes? No

0/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.

Possible Options

No0/5
On an opt-out basis, but only for some non-critical data/uses1.5/5
On an opt-out basis, for all non-critical data/uses3/5
N/A (no data used for non-critical purposes)5/5
On an opt-in basis5/5

Note

You cannot opt-out of non-critical usage of your data

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Handling

Does the policy allow personally-targeted or behavioral marketing? Yes

0/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

Possible Options

Yes0/10
Yes, but you can opt-out3.5/10
Yes, but you must opt-in7/10
No10/10

Citation

Porkbun may advertise or work with trusted third parties to advertise Porkbun products on other websites in a targeted fashion. These targeted ads may be served to you based on tracked interactions on the Porkbun or partner websites that might include cookies or javascript code served on the Porkbun website, often by a trusted third party.

Based on your account activity, we may market to you. We do utilize automated decision-making processes in order to decide how to market to you.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service allow third-party access to private personal data? Yes, not all parties specified

0/10

Decided May 18, 2020 (revision history). This question accounts for 12% of the final score.

The policy allows sharing personal data with third-parties (not just critical service providers), and does not explicitly list the third-parties.

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Possible Options

Yes, not all parties specified0/10
Yes, all parties specified (including non-critical service providers such as advertisers)3/10
Yes, not all parties specified (but only to critical service providers)7/10
Yes, all parties specified (only to critical service providers)8/10
No10/10

Citation

We utilize trusted third parties and contractors to provide our products and services and we may share your personal data with them, for instance:

  • payment processors such as PayPal or Stripe
  • fraud, abuse, and intrusion prevention services
  • companies that serve advertisements
  • companies that we contract to contact you on our behalf, such as Mailchimp or Google Suite. These communications may occur via email, text message, telephone, fax, chat rooms, social media, one-on-one chats, or the postal service. These may be initiated manually or in an automated fashion.
  • customer relationship management services
  • surveys and contest services

If we collect information from you in connection with a co-branded offer with one of our trusted partners, we’ll make sure we make it clear which partner’s privacy policy applies. If you believe your personal information has been submitted to us without your permission, please contact [email protected]

If you connect to us from outside the country in which our servers, a partner’s servers, or a member of our staff are currently located, your data will pass across international borders.

[...]

We will reveal your personal information to law enforcement, governmental authorities and private parties as required by the law. We may additionally disclose your personal data to comply with a legal process or claims process, to protect an individual’s safety, or to comply with requests from 3rd parties with legitimate interests. So long as we’re not legally or procedurally barred from doing so, we’ll try to inform you when we have revealed your personal data in one of the above scenarios.

If you believe that you or a 3rd party you legally represent has a legitimate interest and right to access personal data currently being redacted by Porkbun AND that this right overrides the interests and fundamental rights of the data subject, please contact [email protected] Requests for access to non-public WHOIS information will be answered within 30 days.

Your activity on our site may be tracked by one or more analytics services such as Google Analytics. These sites may store cookies on your computer and use cookies to identify you. This data may be transmitted across international borders if those servers reside in a different country. The data we collect via these services may include information such as which pages you visited, how long you stayed, etc. In some instances, this data may contain information that could be used by Porkbun to personally identify you.

Porkbun may advertise or work with trusted third parties to advertise Porkbun products on other websites in a targeted fashion. These targeted ads may be served to you based on tracked interactions on the Porkbun or partner websites that might include cookies or javascript code served on the Porkbun website, often by a trusted third party.

Based on your account activity, we may market to you. We do utilize automated decision-making processes in order to decide how to market to you.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


Does the service allow you to permanently delete your personal data? Yes, by contacting someone

3/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.

Possible Options

No0/5
Yes, by contacting someone3/5
Yes, using an automated mechanism5/5
N/A (no personal information collected)5/5

Citation

Porkbun will only retain the data we need in order to provide our products and services and as needed to fulfill our contracts. If you wish to have data removed that we rely upon to provide our products and services, you may request such data be deleted by emailing your request to [email protected] We will delete everything other than what’s required for contractual or required record-keeping purposes.

In most cases deleting your personal data will also require the deletion of your account and deletion or transfer out of any domains or products and services to another provider.

We will respond to any requests to remove personal data within 30 days.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.


When does the policy allow law enforcement access to personal data? When reasonably requested

3/5

Decided May 18, 2020 (revision history). This question accounts for 6% of the final score.

Possible Options

Always0/5
Not specified0/5
When reasonably requested3/5
Only when required by a court order or subpoena4/5
N/A (no personal data to share)5/5
Never (special legal jurisdiction)5/5

Citation

We will reveal your personal information to law enforcement, governmental authorities and private parties as required by the law. We may additionally disclose your personal data to comply with a legal process or claims process, to protect an individual’s safety, or to comply with requests from 3rd parties with legitimate interests. So long as we’re not legally or procedurally barred from doing so, we’ll try to inform you when we have revealed your personal data in one of the above scenarios.

Click here to suggest a change or to flag this conclusion as incorrect, or here for more information.



Warnings

Porkbun has no warnings published on PrivacySpy. PrivacySpy publishes warnings when it learns a service has announced a data breach or is found misusing user data. If you believe a warning should be published for Porkbun, submit one here.


Highlighted Policy Snapshot ALPHA

No highlighted policy snapshot has been created for this privacy policy. To view the policy at its original location, click here.

3.2/10

How we calculate ratings →


Version Added

May 18, 2020

Ratings Updated

May 18, 2020

Warnings

0

Maintained by

doamatto

Original Location
Open in New Tab
Other Versions