Privacy policy

wDNS blocks things on your device. It has no accounts, no analytics and no ads, and we never see the sites you visit.

Last updated November 8, 2026.

On your Mac

The Mac app filters on the Mac itself. Your settings, the lists you pick and your allowed sites stay on your Mac.

• DNS lookups for names that aren't blocked go to the resolver you choose in Settings. That's Cloudflare (1.1.1.1) unless you change it, and Quad9, your own DNS over HTTPS server or your network's resolver are the other choices. That resolver sees the names you look up, under its own privacy policy.
• The app downloads block lists straight from their maintainers, such as GitHub for HaGeZi's lists. Those servers see your network address and which list you asked for.

The Mac app doesn't contact any server of ours.

On your iPhone

The iPhone app uses Apple's URL filter. Your phone builds a filter from the lists you pick and checks every site against it on the phone. Only when a site matches does iOS ask our server whether it's really blocked.

• That question is encrypted so that our server can answer it without learning which site it was about (private information retrieval).
• It reaches us through Apple's relay, which hides your network address from us. Apple can't read the question.
• With it, iOS uploads an encryption key under a random identifier that iOS makes up. We keep the key for two days after it was last used so that later questions are faster, then delete it.
• To show it may use our server, iOS gets anonymous tokens from our token server. That server can see the network address of the device asking, but the tokens are blind-signed, so they can't be tied to the questions they're later spent on.
• The app downloads the lists you picked from dl.wdns.app, which Cloudflare serves. Which files you download shows which lists you use. We don't keep logs of downloads, and Cloudflare handles them under its own policy.

Your settings and allowed sites stay on your phone.

Our servers

Our servers are in the EU (Hetzner, Germany). They don't keep request logs. They keep error messages, which can't contain the sites you look up, up to a fixed size, and older ones are overwritten. We don't sell or share data, and we have none about you to share.

Payments

If you subscribe, Apple handles the payment. We get no payment details from Apple, only whether a subscription is active.

Children

wDNS doesn't collect personal information from anyone, including children.

Changes

If this policy changes, the new version goes here with a new date.

Contact

Alexander Skula, support@wdns.app.