Bro I check already, my .sg domain the registry redact free one. But my registrar is US company, they put their own privacy service on top and charge $12. Then when expire they just remove everything, registry redaction also gone. How can like that??
WHOIS privacy failed and my home address is now on a scam site
This is what I'm talking about. The registrar intercepts the free registry redaction and replaces it with a paid product that expires. It's not a bug, it's the business model.
I moved everything to Cloudflare Registrar. Cost price domains, free privacy, no upsell. Only downside is they don't do every TLD.
In Germany this would be an Abmahnung waiting to happen. The registrar must inform you before automatic renewal fails, especially for a service that exposes personal data. But I assume your registrar's TOS says they can change terms with email notice and you agreed.
Check if they actually sent notice. Spam folder, old address, whatever. If they didn't, you might have leverage for a complaint to your local consumer protection.
Cloudflare doesn't do .sg last I checked. Chen you're stuck with the registrar or moving to a different TLD.
I use Porkbun for weird TLDs, they include privacy at no extra cost. Not shilling, just saying it's possible to not get ripped off.
Ya lor Cloudflare no .sg. I check Porkbun got .sg but the transfer fee + 1 year more expensive than my current registrar base price. The privacy included though. Might still move just to stop worrying.
Thanks for the tips all.
Following. I have four .com domains with Namecheap privacy, never thought about whether the registry would redact free.
Namecheap's privacy is free for the first year on new registrations, then paid. Verisign redacts .com by default for individuals since the 2018 RDAP transition. Namecheap's privacy service is technically redundant for most personal registrations.
Check your RDAP record directly at https://rdap.verisign.com/com/domain/YOURDOMAIN. If it shows redacted, you're paying for nothing after year one.
I just checked my RDAP for a domain I bought last month. The registrar privacy is there but the RDAP also shows "REDACTED FOR PRIVACY" on the registry side. So both layers are active? Is that normal?
Normal and harmless. The privacy service fields the contact, the registry redacts the raw data. Redundancy, not conflict.
The issue is when the privacy layer expires and the registry redaction was never enabled. Then you're naked.
I had a domain with OVH where the privacy service expired and the registry redaction was somehow disabled at the same time. OVH claimed it was a "configuration reset." Took three support tickets to get redaction re-enabled. They never explained why it dropped.
I don't trust layered privacy anymore. Native redaction only.