Kilpi: Ad & Tracker Blocker

Kilpi is a free ad, tracker and scam blocker for iPhone and iPad that works in your apps, not just in Safari. Kilpi Shield stops known scam, malware, tracking and ad websites before they load, in Safari, Mail, Messages, games and other apps, and it does its checking on your device. No account, no ads, no in-app purchases. Kilpi is made by Stationify Oy in Finland.

HOW KILPI SHIELD WORKS
Kilpi Shield uses the VPN feature of iOS, but it is not a VPN service: there is no VPN server, your traffic isn't routed through anyone, and your IP address doesn't change. The shield becomes your device's DNS resolver. Before an app connects to a website, Kilpi checks the site's name against protection lists stored on your device. Listed names get "no such domain", so those ads, trackers and scam pages never load. Every other name is looked up with encrypted DNS (DNS-over-HTTPS) through Cloudflare or Quad9, your choice, so the network you're on can't read or change your lookups. Only lookups pass through Kilpi; your connections themselves go straight to the network.

• Works across apps and browsers, on Wi-Fi and cellular
• Turns itself back on after a restart or network change
• Shows what was blocked and why; allow a site in one tap

PROTECTION LISTS
Kilpi uses public block lists, downloaded over HTTPS and checked on your device: StevenBlack (ads and malware) and Peter Lowe's list (ads and trackers). Turn on Phishing.Database for wider scam and phishing coverage, or add your own hosts-format lists. URLhaus (malware), AbuseIPDB and AlienVault OTX are optional with your own free API key. No list catches everything, so stay careful with links that ask for passwords or payment details.

SIMPLE AND EXPERT MODES
Simple mode keeps it to one shield, plain-language explanations and a daily count of what was stopped. Expert mode shows every lookup as it happens with the list that matched, lets you block or allow any domain in every app, checks a domain against your lists, tests your DNS provider and exports diagnostics. Experts can also turn on optional deep inspection for IP, port and server-name rules, live connection details and packet capture.

SAFARI EXTENSION
The optional Safari content blocker blocks listed sites inside Safari and hides the empty spaces ads leave behind. With iCloud Private Relay on, Safari looks sites up through Apple's relay instead of Kilpi Shield, so the extension is what protects Safari then.

PRIVACY
Stationify receives nothing about your browsing: Kilpi has no account, no analytics, no advertising SDK and no server of its own. Lookups that aren't blocked go only to the DNS provider you choose. Recently blocked names and daily totals stay on your device, and you can clear them any time.

WHY KILPI IS FREE
We want to make the internet more private and more secure for everyone, and everyday protection shouldn't cost you anything. We deliberately don't try to make money from Kilpi: it's free, with no subscription, no ads and no in-app purchases. Kilpi doesn't collect your data. The sales of our other apps and games fund Kilpi. You'll find them in Kilpi's Settings, and none of them track you or use third-party ads or analytics.

GOOD TO KNOW
• Requires iOS 26 or later on iPhone or iPad.
• iOS runs one VPN at a time, so another VPN app replaces Kilpi Shield while it's on.
• Apps that use their own encrypted DNS or fixed IP addresses aren't filtered.
• Free: both modes are included, with no in-app purchases.