Ad blocker and tracker blocker that works across your whole device, with private encrypted DNS — and that explains what each blocked domain actually was.
No root. No account. No browsing history stored.
WHY THE APP ASKS FOR VPN PERMISSION
hado99 uses Android's VpnService because it is the only way an ordinary app can see the device's DNS queries. It is a LOCAL VPN: the tunnel starts and ends inside your own phone.
• There is NO remote VPN server, ours or anyone else's
• Your traffic is NOT redirected anywhere
• Only DNS queries enter the tunnel; everything else follows the normal system path
• Nothing that passes through the VPN is collected, stored or sent to anyone
hado99 is not an anonymity VPN: it does not hide your IP from the sites you visit, and it does not change your country. The permission exists to filter DNS on the device, and nothing beyond that.
HOW THE BLOCKING WORKS
When you turn protection on, hado99 inspects the device's DNS queries: the domain names apps ask for before they connect. Each name is checked against a list of more than 137,000 known ad, tracker and malware domains. That check happens on your phone, with nothing sent anywhere.
Whatever passes is resolved over DNS-over-HTTPS, encrypted, so your carrier or the owner of the Wi-Fi cannot read which sites you visit. Same principle as Android's Private DNS setting, with one difference: here you see the list of what was blocked and understand why.
FEATURES
• Blocks more than 137,000 ad, tracker and malware domains
• Private DNS over DNS-over-HTTPS (Cloudflare), encrypted end to end
• Works in every app, not just the browser
• No root required
• Real-time counters of allowed and blocked queries
• Dedicated blocked-domains screen, with the time of each block
• Plain-language explanation for any block
• Allowed something by mistake? One tap undoes it, and the allowed list stays visible
• Pause blocking for 5 minutes, 1 hour or until you resume — without losing DNS encryption
• Per-app report: which apps on your phone talk to trackers
• Self-updating blocklist, digitally signed and verified on your device
• Full English interface, and explanations written in English too
• Works on Wi-Fi, 4G and 5G
WHAT MAKES IT DIFFERENT: IT EXPLAINS
An ordinary ad blocker shows a list of technical names and stops there. You see "adashx4ae.ut.taobao.com" and have no idea what it was.
hado99 goes further: tap a blocked domain and it explains what that domain is, what it does, and why privacy tools block it. The explanation is written by AI and requested only when you tap. What leaves the device is the domain name — nothing else.
REAL PRIVACY
• No browsing history is stored, on the device or on the server
• No account, no login, no device identifier
• No ads, no analytics, no trackers inside the app
• When you request an explanation, only the domain name is sent — no cookie, no identifier
Privacy policy: https://hado99.com/en/privacy/
TRANSPARENCY
• Blocklists: StevenBlack/hosts, AdAway, URLhaus and EasyList/EasyPrivacy — all public and auditable
• Resolver: Cloudflare (1.1.1.1) over DNS-over-HTTPS
• Every blocking decision happens on your device
• The VPN is local: the tunnel ends on your own phone, with no remote server
Website: https://hado99.com
Support: support@hado99.com
Block ads and trackers with private encrypted DNS. No root, no logs, no ads.