Anonymous domain registration: what is really possible

What does "private to the public, not above the law" mean?

It means two different audiences get two different answers. The public, including anyone running a WHOIS/RDAP lookup, learns nothing personal about you. The public record shows our privacy service's contact, or the registry's own redaction.

The law is another matter. Sealname is operated by DomaineGoat LLC, an ICANN-accredited registrar incorporated in Panama. Like every accredited registrar, it must keep certain data and follow ICANN duties such as urgent requests on a threat to life and the UDRP. Beyond those, your data only goes out on a Panamanian court order. Be wary of any service that promises more: the rules below apply to every accredited registrar.

In which cases can Sealname disclose your data?

Only on a Panamanian court order, under our disclosure policy. A foreign lawyer, a private company or a foreign government gets nothing without Panamanian legal process. The only other cases are duties ICANN imposes on every registrar:

1. Trademark disputes under the UDRP or the URS. Under WIPO rules, the registrar must confirm the registrant to the provider and lock the domain within 2 business days of a UDRP complaint.
2. Data escrow: a sealed copy of registration data, used only if a registrar loses its accreditation.
3. ICANN compliance checks of our records.

You are notified before any disclosure, unless the Panamanian court order forbids it. Your data is never sold and never used for marketing. Every request is counted in the quarterly transparency report; the first one is due in January 2027. Authorities should read the law enforcement page.

These requests are real but not routine. During ICANN's RDRS pilot (November 2023 to November 2025), more than 3,700 disclosure requests were filed. About 32% concerned intellectual property and 16% came from law enforcement. About one in four was approved.

Why can't an ICANN registrar hold no data at all?

Because ICANN's contract with every accredited registrar, the RAA 2013, requires three things:

• Email verification. The Whois Accuracy Program Specification requires registrars to verify the registrant's email or phone within 15 days of a registration, a transfer or a change for gTLDs. Without it, the domain is suspended. So "no email required" is impossible.
• Record keeping. Registrars keep the registration record for as long as ICANN requires. At Sealname that record is one email per domain: no logs, no IP address kept.
• Data escrow. Registrars must deposit registration data with an escrow agent (RAA §3.6). If a registrar loses its accreditation, ICANN uses that data to move its domains to another registrar.

In the European Union, NIS2 (article 28) adds similar duties. Registries and entities providing registration services must hold accurate data, have verification procedures and answer legitimate access requests within 72 hours. Sealname keeps only what these rules require: the full list is on data we collect.

How can you keep your domain as private as possible?

A few choices make a large difference:

1. Pick an extension that allows privacy. Some registries ban privacy services (.us) or check identity with documents (.cn, .ru, .in, .dk). Sealname sells only private-capable extensions; the privacy index rates all the others.
2. Use a separate email for your domains. The verified email is never published. A dedicated address still limits what it can be linked to if it is ever disclosed.
3. Pay from a wallet you control. Every crypto payment is public on its blockchain. A payment sent straight from an exchange account is also in that exchange's records, and exchanges usually know who you are.
4. Keep the Organization field empty, unless a company should own the domain. Under ICANN's Registration Data Policy, a filled Organization field makes that organisation the registrant.
5. Give true details. A privacy service is legal; false data works against you. Under US law (15 U.S.C. §1117(e)), knowingly giving materially false contact data to a registrar creates a presumption of wilful infringement.
6. Check the result. Look up your domain at lookup.icann.org after registration. Our guide check your RDAP record shows what to look for.

Is it legal to do all this? Yes: privacy is a lawful choice. The guide is anonymous domain registration legal? covers the details by region.

Is privacy legitimate if abusers use it too?

Yes. Privacy services are common among abusers and honest users alike. One analysis found privacy or proxy services on 65% of 414,218 abuse-listed domains (DNSRF). An ICANN-funded study, reported by PCWorld, found that banks use them too. Hiding a home address is a legitimate need.

What matters is how a registrar handles abuse. Since 5 April 2024, RAA §3.18 requires registrars to act promptly on well-documented DNS abuse. Sealname suspends domains used for phishing, malware or botnets within 24 hours of a well-documented report. Domains used for child sexual abuse material are suspended immediately, and the URLs are reported to NCMEC. Reports go to [email protected], with no account needed, and get an automatic acknowledgement with a reference number. See the abuse page.