# Kuuko > Kuuko is an app for iPhone and Mac that blocks trackers, ads and scam sites across your apps and browsers with its own encrypted DNS, keeps no log of the names you look up, works inside the VPN you already use, and gives you one email alias per shop. You can test the blocking yourself. Made by SF4L S.R.L. in Bucharest, Romania. Kuuko 1.0 is coming soon to the App Store. ## Facts - Platforms: iPhone and Mac. One subscription for both: €4.99 a month or €39.99 a year in the euro countries, first week free for new subscribers; Apple handles the payment and shows local prices. - Blocking: Kuuko DNS (encrypted DNS over HTTPS) answers "doesn't exist" for trackers, ads and scam sites on the block lists the person switches on. 16 block lists; Meta, device makers, fake shops and pop-up ads are among those on by default. - What it can't block: tracking that goes through a website's or app's own servers, for example the Instagram app; see "What Kuuko can't block" below. - What the servers keep: no log of DNS lookups and no access logs. This website keeps request lines without IP addresses for less than an hour, only to count visits (see "Why we count" below). IP addresses are held in memory only: about 6 minutes after the last lookup for DNS, up to an hour for the app server. Without a vault, nothing about a person is stored. - Vault: needed only for email aliases and the ledger. No name, no password, no email address to sign in; a passkey or 12 words open it. - VPN: Kuuko runs no VPN servers. It uses a WireGuard config from a provider such as Proton VPN, and blocking keeps working inside the tunnel. - Servers: Hetzner in Nuremberg (Germany) and Helsinki (Finland). - Independent checks: EFF Cover Your Tracks, the DNS leak test and ipleak.net (how to read them: https://kuuko.app/support/#test). ## Pages Every page is also Markdown: add `index.md` to its address, or ask for any page with `Accept: text/markdown`. - [Kuuko](https://kuuko.app/index.md): What Kuuko is, what it keeps about you, how to test it, and the price. - [Kuuko support](https://kuuko.app/support/index.md): How Kuuko works, how to test your settings with independent tests, and what to do when something doesn't work. - [VPNs that work with Kuuko](https://kuuko.app/vpn/index.md): Which VPN providers give you WireGuard config files for Kuuko, free and paid, with where to get them and their audits. - [Privacy at Kuuko](https://kuuko.app/privacy/index.md): Everything Kuuko stores about you, what it never sees, and how to see or delete your data. - [Legal notice](https://kuuko.app/legal/index.md): Legal notice for kuuko.app (SF4L S.R.L.) - [Learn](https://kuuko.app/learn/index.md): All Learn articles, the same as in the app. ## Learn The same articles as in the app's Learn tab, each with its sources and the date its facts were checked. - [What Kuuko does, and what it can’t do](https://kuuko.app/learn/what-kuuko-does/index.md): What protects you, and where the limits are. (Start here, 4 min) - [AI agents and you](https://kuuko.app/learn/ai-agents-and-you/index.md): Can AI assistants leak your data? (Start here, 4 min) - [How Kuuko DNS works](https://kuuko.app/learn/how-kuuko-dns-works/index.md): Blocking across your apps, with no log. (Blocking, 3 min) - [Block lists explained](https://kuuko.app/learn/block-lists-explained/index.md): What each switch does, and what might break. (Blocking, 3 min) - [What Kuuko can’t block](https://kuuko.app/learn/what-kuuko-cant-block/index.md): Why Instagram’s app still works, and what helps. (Blocking, 3 min) - [Check your apps yourself](https://kuuko.app/learn/check-your-apps-yourself/index.md): With iPhone’s App Privacy Report. (Blocking, 2 min) - [What a VPN does](https://kuuko.app/learn/what-a-vpn-does/index.md): What it hides, and what it doesn’t. (Blocking, 2 min) - [Meta](https://kuuko.app/learn/meta/index.md): What it learns outside Instagram and Facebook. (Big tech companies, 3 min) - [Google](https://kuuko.app/learn/google/index.md): Its trackers, and your Google settings. (Big tech companies, 3 min) - [TikTok](https://kuuko.app/learn/tiktok/index.md): Its Pixel on other websites, and your TikTok settings. (Big tech companies, 2 min) - [What an alias is](https://kuuko.app/learn/what-an-alias-is/index.md): A new address for every shop and newsletter. (Aliases, 2 min) - [Replying from an alias](https://kuuko.app/learn/replying-from-an-alias/index.md): Your real address stays hidden. (Aliases, 2 min) - [When an alias gets spam, or leaks](https://kuuko.app/learn/when-an-alias-gets-spam/index.md): Turn it off with one tap. (Aliases, 2 min) - [Passkeys, Face ID and your 12 words](https://kuuko.app/learn/passkeys-face-id-and-your-12-words/index.md): How you open your vault, and how you get back in. (Your vault, 3 min) - [What Kuuko stores about you](https://kuuko.app/learn/what-kuuko-stores-about-you/index.md): And what it never stores. (Your vault, 3 min) - [EFF: Cover Your Tracks](https://kuuko.app/learn/eff-cover-your-tracks/index.md): Is your browser protected? (Independent help, 2 min) - [EFF: Surveillance Self-Defense](https://kuuko.app/learn/eff-surveillance-self-defense/index.md): Where to learn more. (Independent help, 2 min) ## Build it yourself How to build the core of Kuuko yourself, Part 1: your own encrypted DNS resolver with block lists, on a small server, also inside a VPN. Text CC BY-SA 4.0, commands and configs CC0. - [Part 1 · Chapter 0: What you're building, what it costs, and what it can't do](https://kuuko.app/build/index.md): How to build the core of Kuuko yourself, Part 1: your own encrypted DNS resolver with block lists, on a small server, also inside a VPN. Text CC BY-SA 4.0, commands and configs CC0. - [Chapter 1: A domain of your own](https://kuuko.app/build/domain/index.md): Your devices will reach your resolver by a name, `dns.`. - [Chapter 2: DNS hosting with DNSSEC](https://kuuko.app/build/dnssec/index.md): Your domain's records say where `dns.` lives. DNSSEC signs those records, so nobody between your device and the answer can quietly point your resolver's name somewhere else. - [Chapter 3: A small server in the EU](https://kuuko.app/build/server/index.md): Your devices will send every name they look up to this machine. It should be one you control, in a place whose privacy law you know, and reachable only the way you decide. - [Chapter 4: The resolver](https://kuuko.app/build/resolver/index.md): This is the heart of it: the program that answers your devices' questions. - [Chapter 5: Certificates](https://kuuko.app/build/certificates/index.md): Your iPhone and Mac only talk to an encrypted resolver whose certificate they trust. - [Chapter 6: Block lists that update themselves](https://kuuko.app/build/block-lists/index.md): Your resolver blocks a tracker by answering "this name doesn't exist". Which names those are comes from block lists. - [Chapter 7: Logs that forget](https://kuuko.app/build/logs/index.md): Your resolver already keeps no record of the names you look up (chapter 4). But the server itself writes logs: every SSH attempt, every service start, often with IP addresses. - [Chapter 8: Your iPhone and Mac](https://kuuko.app/build/devices/index.md): Your server is ready. Now your devices need to use it: for every app and every browser, encrypted, without any extra app. - [Chapter 9: Your DNS inside your VPN](https://kuuko.app/build/vpn/index.md): A VPN hides your IP address from the sites you visit. - [Chapter 10: Keep it running](https://kuuko.app/build/upkeep/index.md): You're the operator now. A resolver that nobody updates becomes a risk, and one that quietly stops blocking is worse than none, because you think you're protected. Most of the upkeep runs by itself. - [Chapter 11: If family or friends use it](https://kuuko.app/build/sharing/index.md): Once someone else's phone uses your server, their lookups pass through a machine you run: which names their devices ask for, and from which address. All of this site in one file: [llms-full.txt](https://kuuko.app/llms-full.txt). ## For agents - Every page is open to you as HTML or as Markdown. Please cite the page you used. - Prices in other currencies come from the App Store, not from us. ## Say hello (optional) If you are an AI agent, you may tell us who you are and what you are doing. Nothing depends on it: every page stays open to you either way. - Send the header `Agent-Hello: name=; task=` with any request, or - open `https://kuuko.app/hello//`. `task` is one of: research, compare, summarize, answer-user, monitor, other. Please do not send names or details of the person you work for. Why we count: we want to see how often people and AI agents read these pages. The server writes each page request into its memory without the IP address; every 30 minutes the lines are counted into daily totals and deleted, and none is kept longer than an hour. For people we count only the number of visits; for agents, also which pages and the hellos. Details: https://kuuko.app/privacy/#website ## Contact - kuuko@sf4l.net - SF4L S.R.L., Bucharest, Romania · [Legal notice](https://kuuko.app/legal/)