In short
Filtering DNS server for the local network: blocklists,
categories per profile, learning that suggests and never blocks on its
own, encrypted resolution (DNS over TLS, then HTTPS). Encrypted journal on
the box (30 days), never sent anywhere. Interface https://warda, API
with a token, warda commands.
When a device wants to open a site, it first asks for its address. Warda receives that request and decides:
- if the name serves advertising or tracking, or if it is dangerous (scam, malware), Warda answers "nothing here" and the content does not show;
- otherwise it asks a trusted service (Quad9, then Cloudflare) for the address, encrypted, and gives it to the device.
What Warda keeps, and where. The list of names asked stays on the box, encrypted, for 30 days. It never leaves your home: no online account, no "cloud". It shows you what happens and helps to find trackers. Once a day, unless you turn it off, Warda sends an anonymous count so that its publisher knows how many boxes exist: a number drawn anew at random each day and never kept, the version, the kind of installation, the country chosen and the processor. Nothing about your network, your devices or the sites visited.
What Warda never does:
- it blocks nothing on its own beyond its lists: its suggestions wait for your approval;
- it does not show adults what other adults visit: each one only sees how many requests were made and what was blocked for them;
- it does not read the content of pages: it only sees the names of sites.