✅Summary
Ad Shield filters DNS lookups on your device to block advertising, tracking and malicious domains. Mr SS Applications does not collect, sell or share personal data. The app has no accounts, no analytics SDKs and no advertising SDKs.
🔒 We don't collect your information
Mr SS Applications does not collect, store, sell or share any personal information: no name, email, phone number, contacts, location, browsing history, DNS lookups, web pages or app usage. Everything Ad Shield does happens on your phone. There are no accounts, ads, analytics or tracking tools in the app. The app only connects to what it needs to work: the DNS provider you choose and the filter-list download servers.
⚠️ Not responsible for scams, losses or damages
Ad Shield helps block ads, trackers and known harmful websites, but no blocker can stop every scam, phishing site, fraud or malicious app. Mr SS Applications is not responsible or liable for any scam, fraud, phishing, financial loss, data loss, device damage, or any other direct, indirect or consequential damage arising from the use of, or inability to use, Ad Shield. That includes harmful sites or apps that were not blocked, and sites or apps that stopped working because something was blocked. Always check websites, payments and messages yourself. You use Ad Shield at your own risk. Nothing here limits rights that cannot be limited under applicable law.
🛡️How the VPN is used
Ad Shield uses Android's VpnService to create a local VPN interface on your device. Only the
address of Ad Shield's virtual DNS server is routed into this interface, so the only traffic Ad Shield receives is
DNS lookups – the domain names apps ask to connect to. All other internet traffic goes directly over your normal
network and never passes through Ad Shield or any server operated by Mr SS Applications. The only exceptions are the
optional Direct connections and HTTPS filtering features described below, which are off unless you turn them on.
🌐What happens to DNS lookups
- Blocked lookups (names on an enabled filter list or your personal blocklist) are answered on your device and never leave your phone.
- Allowed lookups are sent encrypted (DNS-over-HTTPS or DNS-over-TLS) to the DNS provider you select – for example Cloudflare, Google, Quad9, AdGuard, Mullvad, or a custom provider. That provider receives the domain name and your IP address, as any DNS resolver does, and processes them under its own privacy policy. Mr SS Applications does not receive these lookups.
- Only if you enable Unencrypted fallback are lookups sent unencrypted to your network's regular DNS server, and only while the encrypted provider is unreachable.
💾Data stored on your device
- Request counters per hour, per day and per app (numbers only).
- A history of blocked domain names with time, category and – on Android 10+ when Android can identify it – the requesting app. Allowed domain names are never saved to storage. History is deleted automatically after 1, 7 or 30 days (your choice) and can be turned off or cleared at any time.
- Your settings, allowlist, personal blocklist, blocked IP addresses and downloaded filter lists (plus readable text copies of those public lists only if you turn on View all rules).
This data stays in the app's private storage and is never uploaded to us. If Android Backup is enabled, settings and rules may be included in your own Google backup, encrypted by Android.
🔎Live request tracker
While protection is on and the Request tracker is enabled, the most recent 2,000 requests – domain name, requesting app, time and the IP addresses it resolved to – are kept in memory only so you can view them on the Live Requests screen. They are never written to storage or sent anywhere, and are erased when protection stops, when you turn the tracker off, or when you tap Clear. Ad Shield cannot see full web addresses (URLs) or page content, because apps use encrypted HTTPS.
🔗Direct connections (optional, off by default)
Some apps, such as Telegram, connect to fixed server addresses without a DNS lookup, so they are invisible to a DNS filter. If you turn on Direct connections (Settings → Request tracker) and choose such apps, only the server address ranges of the apps you choose are routed into the local VPN, and Ad Shield relays those connections on your device so each one can be listed in Live Requests.
Ad Shield sees only the server address, port, the app and the amount of data. The content stays encrypted by the app and is never read, stored or sent anywhere. These details are kept in memory only and erased like the rest of the live log. Traffic of all other apps, and to all other addresses, is never routed through Ad Shield.
🔐HTTPS filtering (optional, off by default)
Some ads come from the same servers as the page itself (for example YouTube video ads and Facebook sponsored posts), so DNS filtering cannot see them. If you turn on HTTPS filtering (Settings → Filtering) and install the certificate it creates, Ad Shield decrypts the HTTPS connections of the browsers you choose, on your phone only, removes ads using EasyList-style rules (refusing ad requests, removing ad data, hiding ad elements) and encrypts them again.
- Pages are filtered in memory and never stored, logged in full, or sent anywhere. Live Requests shows only the address of each removed ad request, in memory.
- Banking, payment, government and sign-in sites are never decrypted; you can add more sites.
- The certificate is created on your phone. Its private key never leaves the phone and is encrypted with Android's secure key storage; the key that created it is destroyed immediately. Remove the certificate from Android's trusted credentials if you stop using the feature.
- Ad Shield always verifies the real website's certificate before showing a page.
- Other apps, and browsers you did not choose, are not affected.
📡Network requests made by the app
- DNS queries to your selected DNS provider, as described above.
- Filter list downloads from their maintainers' servers (e.g.
cdn.jsdelivr.netfor HaGeZi lists andoisd.nl) or from URLs you add. These servers see your IP address, like any download. - Only with HTTPS filtering on: the EasyList and EasyList India filter lists from
easylist.toandadblockplus.org. - Only if you track Telegram under Direct connections: Telegram's official server address list from
core.telegram.org.
🤝Your consent
Before Ad Shield can be used, the "Before you start" screen explains the VPN, why it is needed, that your browsing history is never monetized, and the Data Safety summary, and asks for your explicit agreement to this policy, the Terms & Conditions and the use of a local VPN. Your consent is stored only on your device. You can review or withdraw it at any time in Settings → Privacy & agreements; withdrawing stops protection.
🔑Permissions
- VPN – to receive DNS lookups for filtering. Requested only after you read the in-app explanation and tap Allow.
- Notifications – Android requires a visible notification while a VPN runs; alerts if protection stops.
- Run at startup – to restore protection after a reboot if you enabled Auto-start.
- Network access – for encrypted DNS and filter list downloads.
✉️Contacting us
If you email us, we receive your email address and whatever you choose to include. The in-app contact screen pre-fills the app version, Android version and device model in the draft so you can review or remove them before sending. We use this only to reply to you and never share it.
👶Children
Ad Shield does not knowingly collect information from anyone, including children under 13.
⚠️Disclaimer and limitation of liability
Ad Shield is provided "as is" and "as available", without warranties of any kind. To the maximum extent permitted by applicable law, Mr SS Applications is not responsible or liable for any loss, damage, corruption, deletion, modification, overwriting or unintended change of any files or data, for any loss of connectivity, blocked or malfunctioning websites, apps or services, missed notifications or messages, or for any other direct, indirect, incidental, special or consequential loss or damage arising from the use of, or inability to use, the app. You use Ad Shield at your own risk. Nothing in this policy limits liability that cannot be limited under applicable law.
📝Changes to this policy
Updates will be published on this page and in the app, with a new effective date.
📬Contact
Mr SS Applications
Email: mr.ss.applications@gmail.com