Free · live registry data · no login

WHOIS Privacy Checker

Is your personal data exposed in WHOIS?

How it works

WHOIS privacy checker: is your name, email or address public?

We fetch the live RDAP record for a domain (RDAP is the structured successor to WHOIS) and look at every contact entity: registrant, administrative, technical and billing. For each one we report whether the data is redacted, replaced by a privacy service, or exposed. A visible personal email or home address invites spam, fake renewal invoices and social-engineering attempts against your registrar account. If anything is exposed we tell you exactly which field and how to hide it.

Results appear here after you click Check privacy.

How this works

1
Fetch the RDAP record
We query the registry's RDAP service for the domain and read every contact entity it publishes.
2
Inspect each role
Registrant, admin, tech and billing contacts are checked for a privacy service, redaction markers or real personal data.
3
Report what is visible
Anything that looks like a real name, email, phone or address is listed field by field so you know what to hide.

Frequently asked questions

What is WHOIS privacy?: A service where the registrar publishes its own or a proxy company's contact details instead of yours in the public domain record. Mail sent to the proxy address is forwarded to you, so you remain reachable without exposing personal data.
Isn't WHOIS data hidden by GDPR anyway?: Since 2018 most registrars redact personal data for everyone, not only EU residents, which is why many records now show 'REDACTED FOR PRIVACY'. But redaction policies vary by registrar and registry, and some still publish fields such as organisation, state and country. Checking is the only way to know.
Does WHOIS privacy affect domain ownership?: No. You remain the legal registrant; the privacy service only masks the published contact data. Make sure the registrar account itself is in your name and secured with two-factor authentication.
Can I use WHOIS privacy on every TLD?: Most gTLDs (.com, .net, .org, .io, .co and the new extensions) support it. Some country codes such as .us, .in and some European ccTLDs restrict or forbid it, and some require a visible company name for business registrations.
Why does the record show a privacy company instead of the registrar?: Registrars often operate privacy through a separate legal entity, for example Withheld for Privacy, Domains By Proxy or PrivacyGuardian. Seeing one of these names means the service is working.

Every MailShrine domain includes WHOIS privacy, transfer lock, Anycast DNS with DNSSEC and two business mailboxes.