Quad9 is a recursive DNS resolver run by a Swiss foundation. The address most people use is 9.9.9.9, or the encrypted name dns.quad9.net. It refuses to resolve domains that threat-intel lists mark as malware or phishing, and it says it drops your IP address at the edge instead of keeping a query log tied to you.
“No personal data” is not “we see nothing.” Quad9 still needs your IP for a millisecond to answer, and it keeps coarse geography so it knows where to put servers. Blocking is on by default. A site you actually want can sit on a block list. There is an unfiltered address if you want the privacy policy without the filter.
Encrypted DNS hides the question from your provider. Quad9 still sees the names. That is the trade, and for most households it is the right one. quad9.net
If a site will not load on Quad9, try the unfiltered resolver before you blame the site. Malware blocking is a third party’s list. It can be wrong. On a shared network, encrypted DNS to Quad9 stops the cafe from rewriting the lookup. It does not stop Quad9 seeing it, and it does not hide the IP of the website you open next.
