AdGuard DNS is a hosted encrypted resolver that drops a lot of ad and tracker domains before the page even loads. There is a family mode and a mode that only does security. Any device that can take a DNS hostname can use it. No app is required, though AdGuard also sells apps.
It is a company, and the DNS product sits inside a larger suite. Filtering at DNS cannot see inside an encrypted page, so some ads that load from the site’s own domain still appear. A strict list will occasionally break a payment page. Their log policy is a promise you have to read, not a Swiss foundation’s structure.
Use it for an easy network-wide ad cut. Know you swapped your ISP’s log for AdGuard’s. adguard-dns.io
Use AdGuard’s DNS hostname in Android Private DNS if you want every app covered. A browser-only extension leaves the rest of the phone on the carrier’s resolver. When a bank page breaks, whitelist that domain for five minutes and see. Do not disable filtering globally. The family filter is a censorship setting. Leave it off unless you are configuring a child’s device on purpose.