Privacy Policy

akxlDNS is built to know as little about you as possible. There are no accounts, no tracking, and no analytics anywhere in the service.

The resolver

• No query logging. Your DNS queries are resolved and discarded. We do not record the names you look up.
• No client IPs stored. Your IP address is not logged or retained.
• No EDNS Client Subnet. Your network is never revealed to upstream resolvers.
• Encrypted only. DoH, DoH3, DoT, and DoQ are supported; plain DNS on port 53 is not served.
• DNSSEC-validated. Forged or spoofed answers are rejected, not relayed.

The website

This site sets no cookies, loads nothing from third parties, and runs no analytics or trackers. The "is a domain blocked?" checker, where present, runs entirely in your browser.

The app

The macOS app runs entirely on your Mac. It has no accounts, no telemetry, and no analytics. It makes only these outbound connections:

• Your DNS queries to the encrypted resolver — the reason the app exists.
• Encrypted fallback (Quad9) — if "Encrypted fallback" is on (the default) and the encrypted resolver can't be reached, the app resolves through Quad9 over encrypted DoH so your DNS keeps working. Those queries are then handled by Quad9 under their own no-logging privacy policy. Turn the fallback off to use this resolver only.
• A captive-portal check to Apple's standard captive.apple.com when a network looks like it needs a sign-in page, so the app can offer to pause.
• Update checks — only if you turn on "Check for Updates Automatically," or when you click "Check for Updates." A check fetches a small version file and, like any download, reveals your IP to the update host. No update check happens unless you ask for it.

What we never collect

Names, email addresses, query or browsing history, device identifiers, or advertising IDs. We will never sell or share your data, because we do not have it.

Changes

If this policy changes, the updated version will be posted here.

Last updated: June 28, 2026