> GoDaddy hosting and Website Builder compliance under GDPR. Cookies, EU-US Data Privacy Framework, DPA, WHOIS and EU alternatives.
>
> Canonical: https://www.flowconsent.com/en/services/hosting/godaddy

Hosting

# GoDaddy

Unclassified

GoDaddy is the worlds largest domain name registrar and a popular web hosting and website builder provider. European customers use GoDaddy for domain registration, shared and managed hosting, the GoDaddy Website Builder, WordPress hosting, Microsoft 365 mailboxes and a range of marketing tools. Because GoDaddy is a US company, every European deployment must address the EU-US Data Privacy Framework transfer mechanism, the cookies set by the website builder templates and the WHOIS data processed for ICANN compliance.

[Block GoDaddy until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=hosting) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Hosting](https://www.flowconsent.com/en/services/hosting)

- Consent

  Unclassified

- Prior consent

  Required

- Documented cookies

  3

- Third-party domains

  4

- Servers

  Global infrastructure with US, EU (Netherlands, Germany) and APAC data centres. Customers using the GoDaddy Website Builder are hosted on GoDaddy infrastructure; customers using only domain registration have their site hosted elsewhere.

Overview

## What does GoDaddy do?

## **What GoDaddy does and how it appears on a website**

GoDaddy is a publicly traded US company that operates the worlds largest domain name registrar and a wide range of small business products: shared hosting, WordPress hosting, managed WordPress, the GoDaddy Website Builder (formerly GoCentral), e-commerce, Microsoft 365 mail, GoDaddy Studio and digital marketing tools. On a European website, GoDaddy appears either as the hosting provider behind the domain or as the visible website builder behind a small business landing page.

## **Cookies and data collected by GoDaddy**

On the website itself, GoDaddy hosting layers set technical cookies such as web\_storage, traffic-management cookies issued by the load balancer and session cookies for the Website Builder editor. The Website Builder templates may add Google Analytics or Facebook Pixel snippets if the customer enables them. WHOIS data, billing data and account data are processed in GoDaddy systems and visible only to the operator and to GoDaddy support.

## **GDPR and ePrivacy implications**

GoDaddy.com LLC acts as processor for the hosting and website builder, and as controller for its own marketing communications to customers. The GoDaddy DPA incorporates the European Commission Standard Contractual Clauses and is available in the customer dashboard. Cookies served by the Website Builder are the responsibility of the customer (the controller) and must be channelled through a Consent Management Platform.

## **International data transfers**

GoDaddy.com LLC is certified under the EU-US Data Privacy Framework, providing an adequacy basis for transfers to the United States. EU customers benefit from the GoDaddy Operating Company LLC representation and from EU data centres in Amsterdam and Frankfurt for the hosting service. Account, billing and support continue to run through US infrastructure.

## **Consent and legal basis**

Contractual necessity (Article 6(1)(b) GDPR) covers hosting, domain registration and Microsoft 365 mailboxes. Legitimate interest (Article 6(1)(f)) covers security and abuse prevention. Consent (Article 6(1)(a)) is required for any analytics, marketing or social cookie added through the Website Builder templates.

## **Practical compliance steps**

Sign the GoDaddy DPA in the customer dashboard, request the EU data centre for hosting, disable the default Google Analytics or Facebook Pixel snippets unless consent is collected, list GoDaddy in the privacy notice, document the WHOIS data flow and the ICANN registrar obligations and consider EU alternatives such as IONOS, OVHcloud Domains or Hetzner for sovereignty sensitive workloads.

Compliance

## GoDaddy and the GDPR

GoDaddy is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Contractual necessity under Article 6(1)(b) GDPR for hosting and domain services. Legitimate interest under Article 6(1)(f) for security and abuse prevention. Consent under Article 6(1)(a) for any analytics or marketing cookie set by the GoDaddy Website Builder template.

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive, EU-US Data Privacy Framework, German TTDSG / TDDDG, French CNIL guidelines, ICANN registrar rules

### Impact assessment (DPIA)

A DPIA is recommended when GoDaddy hosts personal data at scale through the Website Builder, when WordPress installations process customer data, or when Microsoft 365 mailboxes hold employee correspondence. The DPIA must cover the US transfer, the EU-US Data Privacy Framework status, the WHOIS data flow, the GoDaddy sub-processor list and the response plan for US government access requests.

### Sample text for your banner

> This website is hosted on GoDaddy infrastructure. Hosting cookies for load balancing and security are strictly necessary and exempt from consent. Optional cookies set by the GoDaddy Website Builder templates for analytics or marketing only fire after you click Accept on the cookie banner. Some processing occurs in US data centres under the EU-US Data Privacy Framework and Standard Contractual Clauses.

Cookies and trackers

## What GoDaddy sets and contacts

- Tracking method

  Web hosting, domain registration and website builder. Server side logs of every request; the GoDaddy Website Builder also injects first party cookies for the dashboard and editor.

- Server location

  Global infrastructure with US, EU (Netherlands, Germany) and APAC data centres. Customers using the GoDaddy Website Builder are hosted on GoDaddy infrastructure; customers using only domain registration have their site hosted elsewhere.

- Data transferred outside the EU

  Operated by GoDaddy.com LLC (Scottsdale, Arizona, USA). EU customers are contractually represented by GoDaddy Operating Company LLC. Transfers to the US rely on the EU-US Data Privacy Framework certification and the GoDaddy Data Processing Addendum based on Standard Contractual Clauses.

### Cookies set (3)

| Name               | Type         | Duration   | Purpose                                                               |
| ------------------ | ------------ | ---------- | --------------------------------------------------------------------- |
| web\_storage       | localStorage | Persistent | GoDaddy Website Builder editor state and preferences.                 |
| traffic-management | HTTP cookie  | Session    | Load balancer cookie used to keep a visitor on the same backend.      |
| mar\_id            | HTTP cookie  | 1 year     | GoDaddy marketing analytics identifier set on godaddy.com properties. |

### Third-party domains contacted (4)

- `godaddy.com`
- `secureserver.net`
- `godaddysites.com`
- `img1.wsimg.com`

Questions

## Frequently asked questions about GoDaddy

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does GoDaddy set?

GoDaddy hosting and Website Builder set technical cookies such as traffic-management for load balancing, a session cookie for the editor and a marketing identifier (mar\_id) on godaddy.com properties. The Website Builder may add Google Analytics or Facebook Pixel snippets if enabled.

### Do I need consent to use GoDaddy?

Hosting cookies are strictly necessary and exempt from consent. Cookies added through GoDaddy Website Builder templates for analytics, marketing or social embeds require prior opt-in.

### What is the legal basis?

Article 6(1)(b) GDPR (contract) for hosting, domain and mailbox services. Article 6(1)(f) for security. Article 6(1)(a) consent for optional analytics or marketing snippets.

### Does GoDaddy transfer data to the US?

Yes. GoDaddy.com LLC is US controlled and certified under the EU-US Data Privacy Framework. EU customers can choose Amsterdam or Frankfurt data centres for hosting, but account, billing and support run through US infrastructure.

### Do I need a DPIA?

A DPIA is recommended when GoDaddy Website Builder hosts customer data at scale, when WordPress sites process personal data or when Microsoft 365 mailboxes hold employee correspondence. Document the US transfer, the WHOIS flow and the sub-processor list.

### How do I implement GoDaddy compliantly?

Sign the DPA, request an EU data centre, disable default tracking snippets, list GoDaddy in the privacy notice, document the WHOIS flow, train the team on registrar abuse handling and consider EU alternatives for sovereignty.

### Are there GDPR friendly alternatives to GoDaddy?

For domains: OVHcloud Domains, IONOS, Hetzner DomainRobot, Gandi. For hosting: OVHcloud, Scaleway, Hetzner, IONOS, Infomaniak. For website builders: STRATO Webseiten-Baukasten, Webador, Zyro and EU-based hosted WordPress (Kinsta EU, Infomaniak Managed WordPress).

### How do I update my cookie policy for GoDaddy?

List GoDaddy.com LLC as a processor for hosting and the registrar role for the domain, describe the technical cookies, reference the EU-US Data Privacy Framework certification, link to the GoDaddy DPA and the privacy notice.

Same category

## More services: Hosting

[See the whole category](https://www.flowconsent.com/en/services/hosting)

### [MochiWeb](https://www.flowconsent.com/en/services/hosting/mochiweb)

[MochiWeb is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MochiWeb integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MochiWeb helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/hosting/mochiweb)

[Hosting](https://www.flowconsent.com/en/services/hosting/mochiweb)

·

### [cPanel](https://www.flowconsent.com/en/services/hosting/cpanel)

[cPanel is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. cPanel supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, cPanel ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/hosting/cpanel)

[Hosting](https://www.flowconsent.com/en/services/hosting/cpanel)

·

### [Amazon Web Services](https://www.flowconsent.com/en/services/hosting/amazon-web-services)

[Amazon Web Services is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Amazon Web Services supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Amazon Web Services ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/hosting/amazon-web-services)

[Hosting](https://www.flowconsent.com/en/services/hosting/amazon-web-services)

·

### [Hostiq](https://www.flowconsent.com/en/services/hosting/hostiq)

[Hostiq is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Hostiq supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Hostiq enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/hosting/hostiq)

[Analytics](https://www.flowconsent.com/en/services/hosting/hostiq)

·

### [nghttpx](https://www.flowconsent.com/en/services/hosting/nghttpx-http-2-proxy)

[nghttpx - HTTP/2 proxy is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. nghttpx - HTTP/2 proxy integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, nghttpx - HTTP/2 proxy helps organizations maintain robust websites that meet user.](https://www.flowconsent.com/en/services/hosting/nghttpx-http-2-proxy)

[Hosting](https://www.flowconsent.com/en/services/hosting/nghttpx-http-2-proxy)

·

### [thttpd](https://www.flowconsent.com/en/services/hosting/thttpd)

[thttpd is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. thttpd supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, thttpd ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/hosting/thttpd)

[Hosting](https://www.flowconsent.com/en/services/hosting/thttpd)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)