Njalla Domains

Lede: Njalla is the only domain registrar that genuinely accepts the WHOIS-privacy burden onto themselves. When you register a domain through Njalla, the registrar of record is *Njalla*, not you — they own the public WHOIS entry, they hold the legal proxy, and the operational relationship between the domain and your identity exists only in their private records, which they have publicly committed to never disclosing without a court order they themselves can challenge. Combined with anonymous signup (XMR / BTC / DOGE / SOL / cash by mail), no email required for registration, and a Tor onion address, Njalla is the privacy-first registrar that most other "privacy registrars" claim to be.

Background: Founded in 2017 by the same team behind The Pirate Bay (Peter Sunde co-founded; the rest of the founding team have deep Swedish file-sharing and copyright-activism roots). Incorporated in Nevis (St. Kitts and Nevis) specifically because the jurisdiction has hostile-to-discovery WHOIS laws and a long history of resisting US/EU subpoena cooperation. The team's prior work surviving copyright litigation, US Treasury sanctions, and Swedish prosecution gives them institutional muscle in resisting domain seizure that hosting-side registrars (Cloudflare, Namecheap, etc.) simply do not have. They publish a transparency report annually and operate a Tor onion mirror as a first-class surface, not an afterthought.

What you trust: Njalla holds the legal title to your domain on your behalf. If you stop paying, they reclaim it; if they go offline, you have no automatic recovery path. The trust posture is therefore "Njalla is solvent and resistant to seizure." Both points are evidence-based: 7+ years of operation, profitable enough to refuse VC funding, public commitment to fighting subpoenas in their Nevis jurisdiction. They also publish quarterly the count and outcomes of legal demands they've received, which most registrars do not. The countertrade is that if Njalla itself loses a court case or gets shut down, your domain effectively dies — which is why the team also publishes a "if we ever shut down" plan for transferring registrar-of-record to users.

Operational specs: Anonymous account at signup — username + password, no email required (you can add one if you want recovery, encrypted). Domain registration prices: €15/yr basic .com / .net / .org, more for premium TLDs and country-codes (.io ~€80, .li ~€30, country-codes vary). Payment in XMR, BTC (Lightning + on-chain), DOGE, LTC, SOL, EUR (SEPA), USD, USDT, USDC, and cash by mail in EUR or USD. DNS hosting included (their own DNS, ANAME records, full DNSSEC). Onion address `njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion` mirrors the full registrar UI, so the entire signup and management flow is accessible without DNS, IP, or TLS leak to clearnet. WHOIS proxying is the default and isn't an upsell — it's how the product works.

Philosophy: The team's stated thesis is that the WHOIS system is structurally a privacy disaster: an internet-wide forced disclosure of contact information attached to every domain ever registered, persisting across history and aggregated by data brokers. Their answer is to be the WHOIS-of-record themselves, accepting all legal mail and forwarding internally, so that no individual registrant ever needs to expose their identity. This pairs with no-KYC-at-signup and BTC/XMR payment to make a domain registration the same kind of pseudonymous transaction as buying a SIM card with cash. Their copyright-activism heritage shows in the design priority on resisting takedowns rather than just hiding contact info.

Grade rationale: Grade A is anchored on three points: (1) WHOIS-on-themselves is unique in the registrar market — almost every "private WHOIS" alternative is a proxy service from your real WHOIS, not a transfer of title; (2) jurisdictional posture (Nevis + Sweden) has track record of resisting subpoenas; (3) anonymous signup is genuine (not just "private payment," but no required identity at all). The dimensions that prevented A+ are (a) custodial registrar relationship means you're trusting Njalla's solvency, and (b) prices are 3-5x higher than budget registrars like Namecheap. Both are direct consequences of the privacy posture; budget registrars give you cheap domains because they offload the WHOIS burden to you.

Useful when: You're hosting any service that touches activism, journalism, anti-censorship, hosting of unauthorized leaks, or just any project where your real-name being on the public WHOIS would create real-world consequences. Common patterns: Tor hidden-service operators registering clearnet mirrors, journalists hosting dropbox / SecureDrop endpoints, copyright-adjacent indexing services, P2P trading desks needing a long-term domain, and operators of privacy-tools who want to align their infrastructure with their product values. Njalla is also the right pick for any individual who simply doesn't want their home address and phone number in a publicly searchable database.

Caveats: You don't legally *own* the domain — Njalla does, and you have a contractual right to operate it. If Njalla loses a registrar accreditation, gets enjoined by a court, or chooses to terminate your account, recovery is non-trivial and the team has published the worst-case fallback plan. Prices are meaningfully higher than commodity registrars; for a single hobby domain it's a few extra euros, for a portfolio it adds up. Transferring domains *out* of Njalla into your own name is possible but requires you to expose your identity to the gaining registrar, which defeats the purpose, so the model assumes you stay on Njalla long-term. Lastly: their public communications style is contrarian and they will not pretend to be a neutral pipe — buying a domain through Njalla means associating your project with a vocal copyright-activism brand, which is a feature for some and a friction for corporate-buyer scenarios.