Your data. Your privacy. Your choice.

Every time your device opens a website or an app, it asks a DNS resolver to translate domain names into IP addresses. We sit at that layer and refuse to resolve known ad, tracker, malware, phishing domains, and anything else you wish to block — so your devices never even reach those servers. No software, no apps, no browser extensions, just a one-time DNS setting change on each device.

No. You change one DNS setting, once, on the device or on your router. Android has Private DNS built in, iOS and macOS take a configuration profile you download from the dashboard, Windows 11 supports encrypted DNS natively, and most routers accept DoT or DNSCrypt. Nothing installs and nothing runs in the background. We also work as the upstream resolver for Pi-hole, AdGuard Home, OPNsense/pfSense and OpenWrt if you prefer.

Pick the app by name. DeCloudUs has over 130+ individual services — TikTok, Roblox, Instagram, Steam, Discord, Fortnite and more — that you switch on per profile. Because the block happens at the DNS layer it applies to every device on that profile at once, including consoles and tablets where you cannot install anything.

Yes — that is what profiles are for. Each profile has its own resolver address, its own filtering categories, its own blocked services and its own custom rules. Point a device at a profile's address and it inherits exactly that policy, with nothing shared between profiles unless you want it to be.

No DNS query limit and no device limit. Set up our DNS on as many devices and routers as you want — your phone, laptop, browser, gaming console, smart TV, an entire home network — all work the same.

In practice, browsing usually feels faster, especially if you enable blocking for ads and trackers because your devices simply don't download them. Our DNS resolvers are tuned for sub-millisecond optimal performance and we offer global auto-routing so queries automatically go a healthy DNS resolver closest to you.

Logs are stored only for the retention period you set per profile (down to 1 hour, up to the platform-wide maximum). You can delete all logs for a profile at any time from the dashboard. They are never used for advertising, analytics, or any third-party purpose.

We only use secure and encrypted DNS protocols as they guarantee that communication between your devices and our servers is completely secure and private. DNS queries over plain IPv4 or IPv6 can be read and/or modified by other parties as the traffic moves through the Internet and thus not secure nor private. You can use our secure DNS on any device or software that supports DoT, DoH, or DNSCrypt, which is fairly wide-spread nowadays. If your network device/router does not support encrypted DNS, you can set up secure DNS directly on individual devices that you wish to secure (mobile devices, laptops, browsers, etc). Alternatively, you can install additional software on your network to extend secure/encrypted DNS to your entire network (such DNSCrypt or Stubby).

For OpenVPN in general (which is what most VPN providers use), it is possible for VPN tunnel to use your device's DNS settings so you do not have to configure DNS IPs with the VPN provider. For mobile phones, for example, Private DNS option is set to use our DNS in android settings. Most VPN proivders allow you to download a VPN client profile to modify and use on other OpenVPN apps (like the official OpenVPN app). The OpenVPN client profile you use from the VPN provider doesn't have any parameters regarding DNS settings. DNS queries are then handled by our DNS servers in a secure, while the tunnel is up and running.

Yes. Schedules let a profile switch policy by time of day and day of week, so social media can be blocked during homework hours and allowed afterwards without you touching anything. The change takes effect at the resolver, so it applies immediately to every device on that profile.

Anything that lets you set a DNS server: Android, iOS, macOS, Windows, Linux, browsers, routers, and clients such as Stubby, Unbound and dnscrypt-proxy. Encrypted transports are supported over DNS-over-HTTPS, DNS-over-TLS and DNSCrypt, so queries stay private in transit as well as filtered.

Nothing, unless you turn query logging on yourself. It is off by default. If you do enable it — usually to see what your devices are connecting to or to monitor online activities — you choose how long entries are kept, you can read them in the dashboard and export them, and you can delete them at anytime.

Yes, that's one of the most common use cases. Create a separate profile for kids and configure it exactly how want. For example, enable adult content / social media / streaming category blocks, enforce safe-search, filter YouTube content as moderate or strict, add custom rules for any specific sites you want to enforce, and optionally enable logs to review activity. You can even schedule different rules for school nights vs. weekends.

Those resolvers answer every query the same way for everyone; they are known for speed and are sometimes more private than your ISP. DeCloudUs is yours: you decide what is blocked, and you can decide differently for each device. A child's tablet, a work laptop and a smart TV can each run their own profile with their own categories, service blocks, schedules and rules, and optional logs only when you actually want them.

Logs are off by default — your DNS queries are not stored anywhere unless you explicitly enable per-profile logging for diagnostics. We only require an email so you can manage your account. Our infrastructure is self-managed; we don't proxy your DNS queries through Cloudflare, AWS, or any other big-cloud provider, so your traffic goes from your devices to our DNS resolvers directly in a secure and private way.

Yes. Every paid plan includes Dex, an assistant built into your dashboard — say "block TikTok on the kids' devices" or "why isn't this site loading?" and it does the work and explains what it changed. It is private, safe, secure and it asks you first before deleting anything. You never have to use it: every setting it touches is available in the dashboard the ordinary way.

Yes, and it costs nothing extra from our side. If you already pay for an AI assistant, you can connect it to your account and manage your DNS by asking it — it will connect to your DeCloudUs account via our secure the open Model Context Protocol (MCP). It is easy to connect and you have control on how much access you give it. Because it runs on your own AI subscription, we charge nothing for the connection.

Dex, our built-in assistant runs on hosted AI providers that charge for compute power, so it is paid for with credits you buy separately from our dashboard — a small one-off purchase, not a subscription, and unused credits never expire while your account is active. Connecting your own assistant instead is free. On privacy: only what is needed to answer the question you asked is ever sent, only when you ask one, and the AI model and hosting provider never stores any data or train models on your datat. Your conversation history stay on our servers for your reference, you can delete them at any time, and they are removed automatically after 30 days.

Yes — paid plans include a free trial period (the exact length is shown on each plan card). No credit card is required up front. After the trial, you can subscribe with the payment method you prefer. If you don't subscribe, the account is automatically removed when the trial ends.

Yes. Cancellation is one click in the dashboard — no support ticket, no retention call. After cancelling paid subscription, you can keep using the service through the end of your billing period. You can also completely delete your account at anytime with a couple of clicks.