Back to the library
Unbound
A recursive DNS resolver that answers queries directly instead of forwarding them to a third party.
Most people's DNS queries (even through a "privacy-focused" provider like 1.1.1.1 or 8.8.8.8) still go to a company that can see every domain being looked up. Unbound skips that middleman entirely: it talks directly to the internet's root DNS servers and resolves the answer itself.
Paired with Pi-hole, it means the only party that ever sees a full picture of browsing habits here is... nobody. Not even a "trustworthy" third party.