The short answer
When you register a domain you have to supply real contact details. Those details
go into WHOIS, the public registration record for the domain, where anybody can
look them up in seconds. Domain privacy substitutes a privacy service's details
for yours in that public record, while you stay the legal registrant.
It is not a loophole and it is not anonymity. It is the difference between your
home address being one search away and it not being.
What goes into the public record without it
The registration record for a domain traditionally contains, and for many
registrations still contains:
- The registrant's name, or company name.
- A street address.
- A phone number.
- An email address.
- Administrative and technical contact details, often the same person.
- Registration, update and expiry dates.
- The registrar and the nameservers the domain uses.
Since GDPR, registrars redact a good deal of personal data for
registrants in scope of European rules, and practice varies by registrar and by
extension. In the United States you should assume the details you enter are
publishable unless you have privacy turned on.
Who reads WHOIS, and why it matters
The people who read domain records at scale are not customers. In practice, a
freshly registered domain with public details attracts:
- Fake renewal invoices. Official-looking letters and emails
asking you to renew a domain through a company you have never used, at several
times the real price.
- Cold calls about SEO and directory listings. A new domain is a
reliable signal of a new business, and lists get sold.
- Web design and "your site is not mobile friendly" pitches,
often sent before the site even exists.
- Targeted phishing. The most damaging category. Somebody who
knows your name, your registrar and your renewal date can write a convincing
message designed to get your registrar login.
Domain privacy explained: what it hides and what it does not
That last row is worth reading twice. Privacy does not hide the existence of the
domain, its dates or its nameservers. Anyone can still see the name is taken and
when it expires.
Who should turn it on
The honest answer depends on what address you would otherwise be publishing.
Clearly worth it
- Sole traders and consultants registering from a home address.
- Home-based businesses of any kind.
- Anyone with a personal safety reason to keep an address unpublished.
- People registering several speculative domains they have not launched yet.
- Practices where an individual's name and number attract unwanted contact.
Less critical
- Businesses with a staffed commercial address already on every page of the
site and in every directory.
- Organisations that are required to publish registration details.
- Domains where a visible, verifiable registrant is a deliberate trust signal,
such as some financial and government-adjacent sites.
Even here, privacy on the phone number and email is often worth
keeping while the street address stays public.
Common misunderstandings
- "Privacy means the privacy company owns my domain." No. You
remain the registrant. The service is a listed proxy for public display only.
- "It will hurt my search rankings." There is no penalty. A large
share of registered domains use privacy.
- "It hides my business from customers." It changes a
registration database, not your website. Your published contact details, your
Google Business Profile and your directory listings are untouched.
- "I do not need it because I have nothing to hide." The risk is
not exposure, it is targeting. The details are used to make scams credible.
- "It stops domain theft." It reduces the information available
to somebody planning one. Registrar lock, a strong password and two-factor
authentication are what actually stop a transfer.
Turning it on
Privacy can be enabled when you register and switched on or off later from the
domain's settings. If a domain has been public for a while, turning privacy on now
still helps, though details already scraped into marketing lists will not
disappear from them.
Two things to keep in order once it is on:
- Keep the forwarding address working. Genuine notices, including
renewal reminders and transfer approvals, arrive through it.
- Keep the underlying details accurate. Registrars are required
to hold correct registrant information, and a domain with knowingly false details
can be suspended. Privacy hides your details; it does not license fake ones.
How AldoMedia handles it
We turn privacy on for business domains as a matter of course unless there is a
specific reason not to, and we register domains in the business's own name at an
address the business controls. If you are unsure what your current domain publishes,
we can look it up with you.
Ask us to check your domain record, or read the wider
guide to domain names for registration, transfers and
renewals.