Here's exactly what Harbor Privacy does, how it works, and why it's different. Set it once, forget it. If something gets blocked that should not be, whitelist it in one click.
The Problem
Your network is leaking data every second.
Every device in your home makes thousands of DNS requests every day. By default, every single one is visible to your ISP -- logged, analyzed, and potentially sold.
📡
ISP Tracking
Comcast, Verizon, and AT&T can see every domain you visit via plain-text DNS queries -- even in incognito mode.
📺
Smart Device Telemetry
Your TV, thermostat, and speakers constantly phone home with usage data -- even when you're not using them.
🎯
Ad Tracking
Ad networks build profiles from your browsing behavior across every website and app on every device in your home.
⚠️
Malware Domains
Malicious domains don't get blocked at the browser level -- they need to be stopped before they ever load.
What's Included
One device. Every device protected.
01
DNS-Level Ad & Tracker Blocking
Blocks ads, trackers, and telemetry at the DNS level -- before they reach any device. Works on every phone, TV, laptop, and smart home device automatically.
02
Encrypted DNS over HTTPS
All DNS queries are encrypted so your ISP cannot see what sites you visit. Uses DNS over HTTPS (DoH) with your personal client ID.
03
Recursive DNS with Unbound
Queries resolve directly from root servers -- no forwarding to Google or Cloudflare. No third party sees your complete query history.
04
Hagezi Threat Intelligence
Updated daily with known malware, phishing, and tracking domains. Blocks threats before they load.
05
Built-in Failover. Always Online.
If Harbor is ever unreachable, your devices automatically fall back to Quad9 so your internet keeps working. You will never lose connectivity because of us.
06
Personal Dashboard with One-Click Whitelist
See your blocked stats, add custom rules, and whitelist any site in one click if something gets blocked that should not be. No support tickets, no waiting.
Reliability
Built to stay out of your way.
Harbor Privacy is built to stay out of your way. If our servers are ever temporarily unreachable, your devices automatically fall back to Quad9 — a trusted, no-log DNS resolver — so your internet keeps working normally. You will never lose connectivity because of us. And if a legitimate site ever gets blocked, you can whitelist it yourself in one click. No phone calls, no waiting, no tech knowledge needed.
Always
INTERNET KEEPS WORKING
Quad9
AUTOMATIC FALLBACK DNS
1 click
TO WHITELIST ANY SITE
How It Works
Three steps to a private network.
01
I come to you
I visit your home, set up a dedicated Raspberry Pi privacy device on your network, and configure everything from scratch. Takes about an hour.
02
Every device is protected
The device becomes your DNS resolver. Every phone, TV, laptop, and smart home device on your network is automatically protected -- no configuration needed on each device.
03
It runs itself
Blocklists update automatically. Cloud failover runs silently. Your protection never stops -- even when you're asleep.
The Difference
Before and after Harbor Privacy.
# Before Harbor Privacy -- your network's DNS log:
ads.tracking.com→ Comcast logs it. Advertisers see it.
telemetry.samsung.com→ sent to Samsung
malware-site.net→ no protection
healthinfo.com→ ISP can sell this
# After Harbor Privacy:
ads.tracking.com→ BLOCKED
telemetry.samsung.com→ BLOCKED
malware-site.net→ BLOCKED
healthinfo.com→ resolved privately via encrypted DNS
Who This Is For
Built for South Shore households.
Families with kids
Add Family Safe for SafeSearch enforcement and adult content blocking on every device -- without installing anything on each phone or tablet.
Work-from-home households
Protect sensitive work data from trackers and malware on the same network your kids use for gaming and streaming.
Smart home owners
Stop your TV, Alexa, and doorbell from constantly phoning home with data about your household routines.
Privacy-conscious residents
You know Xfinity sells your browsing data. You want it stopped. Harbor Privacy does exactly that -- at the network level.
Ready to get started?
On-site installation for South Shore residents or remote DNS protection anywhere in the world.