So I've decided to dump Namecheap as my domain registrar. Technical problems aside (of which there have been a few), the final line they crossed was loading scripts from Facebook, DoubleClick, and Google on their home page.
My domain registrar should share _absolutely nothing_ with Facebook. Namecheap is no longer to be trusted as they don't seem to understand basic expectations of privacy.