Privacy and anti-surveillance projects face a unique registrar problem: they need anonymity by design, not as an afterthought. Mainstream registrars—GoDaddy, Namecheap, even some 'privacy-focused' competitors—require identity verification, log payment trails, and respond to DMCA takedowns without friction. For projects documenting state surveillance, operating circumvention tools, or simply refusing to participate in identity databases, this is unacceptable.
The specific challenges are real. A privacy activist's domain gets flagged for 'abuse reports' from hostile actors. A journalist operating in a hostile jurisdiction needs to register anonymously without a credit card trail linking them to their work. A VPN or Tor exit node operator faces routine takedown threats from copyright holders and ISPs. Crypto projects documenting regulatory overreach need domains that won't fold under pressure from financial regulators.
Mainstream registrars fail because they're built for compliance theater. They collect KYC data by default, process payments through trackable channels, and treat DMCA notices as liability-reduction exercises. Their 'privacy' offerings are thin: proxy registrars that still know who you are, WHOIS masking that costs extra, and payment methods that still require identity.
You need a registrar that doesn't ask. One that accepts anonymous payment, doesn't log unnecessary data, and treats takedown notices as what they often are—harassment by bad-faith actors. Not for illegal content, but for the space where freedom and privacy actually live.