MBRAThe part of the shadow where no light gets through. A DNS firewall that lives on your phone and sends nothing anywhere.
Before Pixelgram can load a thing, it asks a name server where app-measurement.com lives. Every app does this, dozens of times a minute.
iOS is told its DNS server lives at a private address inside Umbra's tunnel, and that address is the only way in. Web traffic takes its normal route, so the battery barely notices.
app-measurement.com is on the blocklist, so the answer is the null address. The app believes the tracker does not exist and moves on.
cdn.pixelgram.app is allowed, so Umbra forwards it over encrypted DNS to the resolver you pick, Quad9 by default, and hands back the real answer.
Both questions land in the log on your phone, marked blocked or allowed. Seven days later they are deleted. No account, no sync, no telemetry.
This is the real blocklist that ships inside Umbra: 46,693 tracker and analytics domains. Type any domain and see what your phone would hear back.
The list is checked right here in your browser. Nothing you type is sent anywhere.
Pick a domain on the left, or type one. A subdomain of a listed domain is blocked too, just like on the phone.
Tap the cube. Six gray slabs apart means off. One white block means every tracker name on the phone gets a dead answer, with the day's counts and a chart of the last 24 hours underneath.
Each lookup with its time and type, marked blocked or allowed. Filter to the blocked ones. Kept for seven days, then deleted.
Share your iPhone's App Privacy Report to Umbra and every app lists the domains it contacted, trackers first, with a switch on each.
Pick who answers the allowed questions: Quad9, Cloudflare, Mullvad, or your own. Add blocks and allows on top of the list.
Live demo. Tap the cube, open an app, flip a switch.
MBRATracker domains are sinkholed on this phone. Nothing leaves the device.
Queries that are not blocked are sent here over encrypted DNS.
The blocklist combines Umbra's own list with EasyPrivacy by The EasyList authors, under CC BY-SA 3.0.
An iPhone that isn't managed by a company keeps apps blind to one another. Umbra doesn't pretend otherwise. Where it hits a wall, it tells you, and does the real thing it can.
A packet tunnel sees packets with no sender. The filter that can name the app only runs on supervised or managed devices.
Blocks by domain for every app, and says plainly that it's global. Then shows which app talks to which tracker, so each block is an informed one.
No public API returns the list of installed apps. The private one gets an app rejected.
Reads the App Privacy Report your iPhone already keeps. Share it to Umbra and every app appears with the exact domains it contacted.
Payloads are encrypted end to end. Opening them needs a root certificate on the phone, and pinned apps refuse it anyway.
Shows who was asked for: every domain, when, what type, and whether it was answered or sinkholed.
iOS runs one VPN tunnel at a time, and ignores DNS settings while any VPN is connected.
Steps aside and says so. When another VPN takes over, the shield reads Paused, and one tap resumes once that VPN is off.
DNS firewall, live log, per-app trackers from Apple's own report, your own rules. Built, tested with real users, and on its way to the App Store.
A native app, in TestFlight. macOS can name the app behind each connection, so on the Mac per-app rules are real. Same engine as the phone.
Kotlin and Jetpack Compose. Android's VPN service can attribute connections to apps too, so it gets the Mac's per-app rules.
Umbra for iPhone is on its way to the App Store.