![GoDaddy's own published web-security graphic from its Indian site, showing a 'Website Secured' lock badge, used here to illustrate a page about GoDaddy's privacy notice]()
Almost no privacy notice mentions the Do Not Track setting sitting in every major browser. GoDaddy's does, and the answer is no. We read the global privacy notice published on its Indian site on 14 October 2026, stamped "Last Revised: 28-05-2026".
"There are no generally accepted standards for this feature and we do not respond to ‘Do Not Track’ signals." The next sentence honours a newer signal, the Global Privacy Control — but only "where required by applicable law".
Below: every control the notice offers, the no-sale statement read next to the disclosure list four lines under it, a retention section that never names a period, and the three things this notice does better than most. Everything quoted verbatim. This is a description of a published document, not legal advice, and nothing here assesses whether the notice complies with any law.
Verbatim, from GoDaddy's global privacy notice
Read 14 October 2026 on godaddy.com/en-in/legal/agreements/privacy-policy
"Some web browsers provide a 'Do Not Track' feature. There are no generally accepted standards for this feature and we do not respond to 'Do Not Track' signals. We recognize universal opt-out mechanisms, such as the Global Privacy Control, where required by applicable law."
📅 Update log:
14 October 2026 — First publication. GoDaddy's global privacy notice read in full from godaddy.com/en-in/legal/agreements/privacy-policy, logged out, in India, nothing bought and no account opened. Document stamped "Last Revised: 28-05-2026"; 140 sentences over 45 characters. Captured and quoted: the automatic collection sentence; the third-party-data-provider sourcing sentence; the inferences and artificial intelligence sentence; the telephone, text and messaging outreach use; the catch-all other-uses line; the no-sale sentence and all five limbs of the disclosure list including the marketers-and-advertisers entry and the asset-sale and merger carve-out; the cookies, web beacons and scripts definitions including the email-open tracking purpose; the essential-cookies consequence; the Do Not Track refusal and the Global Privacy Control recognition with its applicable-law condition; the Manage Privacy Settings and Account Settings controls; the Amazon Web Services storage disclosure; the international transfer and EU/UK certification references; the retention sentence and all three deletion factors, reproduced with the source's own missing word; the under-18 provision; the lawful-basis sentence; the non-discrimination and no-financial-incentive commitments; and the change clause including its does-not-reduce-rights limb. No price, plan cost or coupon code is asserted anywhere on this page. Content verified 14 October 2026.
The sentence most privacy notices leave out
GoDaddy's global privacy notice is the document covering every GoDaddy product — domains, hosting, email, the builder. We read the version published on its Indian site on 14 October 2026. It is stamped "Last Revised: 28-05-2026" and runs to 140 sentences.
Most privacy notices say nothing at all about the Do Not Track setting built into every major browser. This one addresses it, and the answer is no.
Verbatim, from GoDaddy's global privacy notice, read 14 October 2026: "Some web browsers provide a ‘Do Not Track’ feature. There are no generally accepted standards for this feature and we do not respond to ‘Do Not Track’ signals. We recognize universal opt-out mechanisms, such as the Global Privacy Control, where required by applicable law."
Read the two sentences together, because they are doing different things. Do Not Track is declined outright, with a reason given — there is no agreed standard behind it, which is true and is why most of the industry ignores it silently. The Global Privacy Control is honoured, which is the better news, but the clause attaches a condition: "where required by applicable law".
That condition is the part worth noticing from India. The Global Privacy Control is legally mandated in some jurisdictions and not in others. A notice that honours it "where required by applicable law" is promising to follow the rules that apply to you, not promising the signal works everywhere. We are describing the wording, not assessing what any law requires of GoDaddy anywhere.
Credit where it is due: saying this plainly is more useful than saying nothing. A reader who knows Do Not Track is ignored can stop relying on it.
Every control the notice offers, in its own words
| Control | The notice's wording | What it amounts to |
|---|
| Do Not Track | "There are no generally accepted standards for this feature and we do not respond to ‘Do Not Track’ signals." | Not honoured, and the notice says so outright |
| Global Privacy Control | "We recognize universal opt-out mechanisms, such as the Global Privacy Control, where required by applicable law." | Honoured, but conditioned on your jurisdiction |
| Browser cookie blocking | "many web browsers allow users to block cookies… If you set your browser to block all cookies, you may not be able to use our services." | Available, with a stated consequence |
| Manage Privacy Settings | "Through this notice by clicking Manage Privacy Settings" and "If you are a customer, through your Account Settings" | The two controls GoDaddy points you to |
| No penalty for using your rights | "We will not discriminate against you for exercising your privacy rights." | A commitment, stated unprompted |
| No pay-for-data schemes | "We do not provide any financial incentives for providing personal data to us." | Rules out discount-for-data arrangements |
"We do not sell" — and the list that follows it
The disclosure section opens with an unambiguous statement: "We do not sell, lease, rent, or transfer personal data to third parties for monetary or other consideration." That is a strong sentence and it is more than many notices offer.
It is then followed by the list of parties the data is disclosed to. The third entry is the one a reader should see next to the first sentence.
| Who | The notice's wording | Note |
|---|
| The heading above the list | "We do not sell, lease, rent, or transfer personal data to third parties for monetary or other consideration." | An explicit no-sale statement, in its own words |
| To processors | "to processors to operate our business and provide services, including but not limited to providing security services, payment processing and customer support; conducting contests and surveys; generating data insights" | Suppliers acting on GoDaddy's instructions |
| To business partners | "to business partners to offer some services, such as email and payment processing" | Named functions rather than an open category |
| To marketers and advertisers | "to marketers and advertisers, including for the purpose of creating and delivering personalized marketing and advertising messages" | The entry worth reading next to the no-sale line |
| To law enforcement | "to comply with law enforcement and other legal requests, protect our legal rights, prevent harm to us or others, and enforce our policies and contracts" | Standard, and stated |
| On a sale of the business | "in addition, if we sell some or all of our assets or merge with a third-party we may transfer relevant personal data to the buyer or new company" | The carve-out that survives the no-sale line |
There is no contradiction here, and we are not claiming one. "Sell" is a defined concept in data-protection law and sharing data with advertisers to deliver personalised messages is not automatically a sale of it. The two statements can both be accurate at once.
The point is narrower: a reader who stops at the first sentence will have the wrong picture. "We do not sell your data" and "your data goes to marketers and advertisers for personalised advertising" are both GoDaddy's own words, four lines apart, and the second is the one that describes what happens day to day.
The last entry in the list is the one that outlives the promise. "if we sell some or all of our assets or merge with a third-party we may transfer relevant personal data to the buyer or new company" — the no-sale commitment binds GoDaddy, and a corporate transaction can move the data to someone who never made it.
How long is the data kept? The notice never says
We read the retention section looking for a number — days, months, years, anything. There is none anywhere in the notice. What it gives instead is a purpose and three factors.
"We retain personal data for our business needs and to comply with law." Then: "If we no longer need personal data, we may delete it or de-identify it so that it no longer identifies a specific person."
The deletion test, verbatim (the missing word is the source's own): "Factors we consider when deciding when to delete or de-identify your personal data include: (1) if you still have an account, (2) if we are required to retain personal data to comply with law, or (3) if the personal data is needed for tax other business purposes."
Note the construction. The factors "include" those three, so the list is not exhaustive; "may delete it or de-identify it" is permissive rather than obligatory; and de-identification is offered as an alternative to deletion, which means the record can persist in a form the notice says no longer identifies you.
The practical reading: while you still have an account, factor (1) is satisfied and nothing is due to be deleted. Closing an account you no longer use is the one lever the notice describes that a reader actually controls.
We are describing a document, not evaluating it. Whether a criteria-based retention policy satisfies any particular law is a matter for a regulator, and many perfectly compliant notices are written exactly this way.
What the notice does unusually well
A page that only listed the uncomfortable clauses would be an inaccurate description of this document. Three things in it are better than the norm.
The change clause protects data already collected. "If we change this global privacy notice, it will apply to personal data collected prior to adoption of the new statement only to the extent as the new statement does not reduce the rights of affected data subjects." Plenty of notices simply say changes take effect on posting and apply to everything. This one says a future rewrite cannot retroactively take away rights attached to data it already holds.
It rules out data-for-discounts. "We do not provide any financial incentives for providing personal data to us", alongside "We will not discriminate against you for exercising your privacy rights."
It names where the data lives and who it is about. "We store personal data on our own systems and with trusted service providers, including Amazon Web Services", and "We do not knowingly collect personal data about anyone under 18 without permission from their legal guardian" — 18, not the 13 some brands use.
The parts that are easy to skim past
- Data you never gave it. "Examples of personal data obtained from other sources include publicly available data, social media information, and information lawfully gathered by third party data providers."
- Data it makes up about you. "We process data in connection with our business and services to generate inferences and insights that may be linked to a specific person, including through the use of data analytics and artificial intelligence."
- Phone and messaging outreach. Listed among its uses: "Contacting customers, prospective customers, and others by telephone, text or messaging applications to offer you our services."
- Email open tracking. "Web Beacons are image files placed in our web pages and emails that we use for such purposes as determining if an email has been opened or an advertisement has been viewed."
- A catch-all use. "Other uses consistent with the purposes for which the personal data was collected or provided to us."
- Cookies you cannot refuse without cost. "Some cookies, however, are essential for our website and services to function. If you set your browser to block all cookies, you may not be able to use our services."
None of this is unusual and none of it is alleged to be improper. Buying data from third-party providers, building inferences, tracking email opens and running essential cookies are ordinary practices across the industry, and GoDaddy writes them down where a reader can find them, which not every company does. Nothing on this page is legal advice, and nothing here assesses whether this notice complies with any law. Your statutory rights apply regardless of what any notice says.
Frequently Asked Questions
Does GoDaddy honour the Do Not Track setting in my browser?
No, and the notice states it directly rather than staying silent. "Some web browsers provide a ‘Do Not Track’ feature. There are no generally accepted standards for this feature and we do not respond to ‘Do Not Track’ signals." The next sentence is the useful counterpart: "We recognize universal opt-out mechanisms, such as the Global Privacy Control, where required by applicable law." So a Global Privacy Control signal is honoured where the law where you are requires it; the older Do Not Track header is not honoured anywhere. The controls the notice actually points you to are its own "Manage Privacy Settings" link and, for customers, "Account Settings". Quoted verbatim from the version read 14 October 2026.
Does GoDaddy sell my personal data?
Its notice says it does not, in those words, and then lists who the data goes to anyway. "We do not sell, lease, rent, or transfer personal data to third parties for monetary or other consideration." Four lines below, in the list of parties data is disclosed to: "to marketers and advertisers, including for the purpose of creating and delivering personalized marketing and advertising messages." These are not contradictory — 'sell' is a defined concept and disclosing data to advertisers to personalise messages is not automatically a sale. But a reader who stops at the first sentence gets the wrong picture of what happens day to day. The list also ends with a carve-out: "if we sell some or all of our assets or merge with a third-party we may transfer relevant personal data to the buyer or new company."
How long does GoDaddy keep my data after I close my account?
The notice gives no period at all — there is no number of days, months or years anywhere in it. It says "We retain personal data for our business needs and to comply with law" and that "If we no longer need personal data, we may delete it or de-identify it". Deletion turns on three stated factors: "(1) if you still have an account, (2) if we are required to retain personal data to comply with law, or (3) if the personal data is needed for tax other business purposes" — reproduced with the source's own missing word. Three things follow from that wording: the factors "include" those, so the list is open; deletion is "may", not must; and de-identifying is offered as an alternative to deleting. While an account is open, factor (1) applies. Closing an account you no longer use is the one step the notice describes that you control.
Can GoDaddy change its privacy policy and apply it to data it already has?
Only in your favour, on its own wording — and this is the most protective clause in the document. "If we change this global privacy notice, it will apply to personal data collected prior to adoption of the new statement only to the extent as the new statement does not reduce the rights of affected data subjects." In plain terms, a future rewrite cannot retroactively strip rights attached to data already held. That is notably better than the common formula of changes being effective on posting and applying to everything. Changes are announced "by posting a revised statement at the same location as this Notice, on another location on our website, or by contacting customers directly", so checking the "Last Revised" stamp — 28-05-2026 when we read it — is the practical way to spot one.
Where does GoDaddy get data about me that I did not give it?
The notice names three routes. First, collection without you typing anything: "We collect personal data automatically when you visit our websites, use our services, contact us, open our emails, or view our advertising" — email opens included, via "Web Beacons… image files placed in our web pages and emails". Second, outside suppliers: "Examples of personal data obtained from other sources include publicly available data, social media information, and information lawfully gathered by third party data providers." Third, data it creates: "We process data… to generate inferences and insights that may be linked to a specific person, including through the use of data analytics and artificial intelligence." All three are ordinary industry practice; the notable thing is that they are written down. Nothing here alleges any impropriety.
Prices & codes last verified: October 14, 2026
Zoutons may earn a commission when you buy through links on this page. Every quotation on this page is GoDaddy's own published text, read on 14 October 2026 from godaddy.com/en-in/legal/agreements/privacy-policy, logged out, in India, with nothing bought, no account opened, no privacy request submitted and GoDaddy not contacted. Quotations are reproduced verbatim, including the source's own capitalisation, spacing, punctuation and, in the retention section, an apparently missing word in the phrase "needed for tax other business purposes"; errors inside quotation marks are the source's, and any emphasis is ours. This page describes what one published document says. It is a summary for general information, it is not legal, data protection, tax or financial advice, and it must not be relied on as a statement of your contractual or statutory rights. Nothing on this page assesses whether this notice, or any practice described in it, complies with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and rules made under it, the General Data Protection Regulation, the California Consumer Privacy Act or any other data protection law, rule, standard or guideline anywhere; and nothing here tells any reader what rights they personally have, which depend on where they live and which law applies to them. In particular, reporting that a notice states it does not respond to Do Not Track signals, that it names no retention period, that a no-sale statement sits near a disclosure list naming marketers and advertisers, or that it carves out a merger or asset sale, is a description of published wording and is expressly not a statement that any of those things is unlawful, non-compliant, unfair, deceptive, a dark pattern or improper. Declining to honour Do Not Track is lawful and near-universal across the industry; 'sell' is a defined term under several data protection regimes and disclosing personal data to advertisers for personalised advertising is not necessarily a sale of it, so the no-sale statement and the disclosure list are not presented here as contradictory; criteria-based retention policies without fixed periods are common and may be entirely compliant; and transferring personal data on a merger or asset sale is an ordinary and generally lawful commercial event. Nothing on this page alleges or implies any wrongdoing, data breach, misuse of personal data, unfair trade practice, dark pattern or breach of law by GoDaddy.com, LLC, GoDaddy India Domains and Hosting Services India Pvt Ltd, any GoDaddy affiliate, or by Amazon Web Services or any other third party named in the notice. Publishing a privacy notice openly, addressing Do Not Track at all rather than staying silent, committing not to reduce rights attached to data already collected, and ruling out financial incentives for personal data are ordinary and proper acts and several are better than common industry practice. The document was read as text, which flattens its tables, lists and footnotes and may omit structure; it incorporates other notices by reference that are not reproduced here, including the European Data Protection Disclosures and the Australian and Canadian supplemental privacy notices, and regional notices may grant rights or impose duties not described here. We have not submitted any access, deletion, correction or opt-out request, tested any privacy control, or verified what data GoDaddy in fact holds, retains, discloses or deletes, and we make no representation about how GoDaddy acts in practice in any particular case. No price, plan cost, renewal rate, fee or coupon code is asserted anywhere on this page. Privacy notices, their revision stamps and their contents change without notice and may already differ from what is described here; the version published on godaddy.com at the time you read it prevails over anything on this page, and you should read the version that applies to you, and take your own advice, before acting.
Flipkart Big Billion Days 2026 Is Live: General Access Open October 9 
Myntra Sale Calendar 2026: Big Fashion Festival Live Now, Winter EORS Dates 
Amazon Upcoming Sale Calendar 2026: Next Sale Dates India, GIF & More 
Nykaa Sale Calendar 2026: Diwali Dhamaka & Pink Friday Dates, Next Sale 
Amazon Great Indian Festival Kitchen Offers October 2026: Air Fryers, Mixers 
Udemy Upcoming Sale 2026: Next Sale Dates, Black Friday & Coupons 
Booking com 
Hostinger 
Dell 
Udemy 
Agoda 
Nykaa 
Myntra 
Ajio