Changelog

Block families without opening DNS-request details

Family switches now sit directly below their Family block pill. Hover, focus, or tap the pill for the explanation and queued progress; expand DNS requests only for request details. Retry and removal controls remain available without expanding. Saved eligible additions can continue once background continuation is activated. Provider conflicts stay marked for review; Datante checks again before retrying and never adopts or removes unowned rules.

Review exact-host purpose evidence separately from device activity

Operators can import and inspect the 106 exact hosts from the 10-page More URLs snapshot, including its seven independently sourced host references, source URLs, notes, and conflicts at /admin/privacy/intelligence. The PDF claims 128 endpoints, but two groups are absent. A document heading is only a bootstrap claim: service-purpose evidence does not identify a physical device or establish that blocking is safe, and existing Ghostery evidence remains in its own feed.

Use complete saved activity for 24 hours, 7 days, or 30 days

Households can block using the complete saved snapshot for the displayed range without a separate 24-hour CSV download. A block stays on until explicitly turned off. If that snapshot is no longer current or complete, refresh or load the range before retrying; no rules change. Family blocks affect the household DNS resolver, not a physical device, and DNS propagation or cached connections can lag.

Understand what a public threat report can and cannot show

Operators can review exact URL reports, source history, freshness, and unavailable feeds separately from domain purpose and DNS blocking. Customer-facing explanations are off until the read switch is enabled; a reported URL never identifies a device or proves its entire host is dangerous.

Know which labels have been checked

Operators can review public-source evidence and disagreements before a domain description is used. Your existing DNS protection and device-family labels do not change merely because a source is listed. Registry-backed dashboard labels are rolled out separately after source review; a tracking-list entry is not a malware verdict or permission to block.

See what the setup network check can—and cannot—confirm

Setup prefers functional IPv6 reachability. Public IPv4 needs a matching router WAN address and a confirmed provider link before use. An ambiguous WAN or CGNAT can indicate a compatibility issue; selecting a router or passing the resolver test does not prove that every device and DNS path is covered. Recheck from Setup or Settings when your network changes.

See family block status before opening details

Compact tiles show the saved family-block status instead of historical blocked requests. Open Details for the block switch, every retained domain, request counts, and recovery steps. Signed-in households with active service can manage their own family rules; saved blocks stay in place if a family temporarily disappears from recent activity.

Change your mind while a device-family block is queued

Cancel a queued family block from its Details card without waiting for a fresh DNS summary. Datante clears its pending request, removes only rules it confirmed owning, and flags unowned Datante Admin rules for review instead of deleting them.

Block switch now shows queued and confirmed states

The switch moves to an amber middle position while a DNS change is queued, then moves to Blocked only after managed rules are confirmed. If confirmation fails, it shows Needs review instead of appearing complete.

Group related domain activity with clearer evidence

A strong device-family match can raise a lower-confidence sibling on the same registrable root. Boosted rows say when they rely on sibling evidence. This is a category, not a measured percentage or proof of a physical device; sibling-only domains are not automatically added to DNS block rules.

See confidence and every retained request domain

Device cards now explain how confident the family identification is. See the three busiest DNS domains at a glance, expand to all retained domains, and distinguish allowed, blocked, mixed, or unavailable outcomes without guessing from older data.

Read DNS block status at a glance

The admin-only block switch now shows compact indicators for applying, queued, excluded, and review-needed rules, with the full domain details and recovery steps available on demand. It does not change your rules.

Admin-only device activity block controls

The Devices page can block domains inferred for a family on the household resolver. Shared domains and existing manual rules are skipped, pending changes are retried after activity refreshes, and the interface explains that inferred families are not physical devices.

Follow a dedicated C4000XG guide

CenturyLink Greenwave C4000XG owners can now select their modem during setup, follow its exact custom-DNS menu path, and open recovery steps if the menu differs or the connection test fails.

Check network status from the top bar

The top navigation now shows whether the DNS network is operational, under maintenance, or temporarily unavailable, with a clear explanation for each state.

Request one email when setup returns

If network maintenance pauses setup, you can request one recovery email at your account address, close the page, and cancel the request before it sends.

See maintenance before starting DNS setup

When our DNS network provider confirms maintenance, Datante pauses setup before making changes, explains what is happening, and automatically restores the setup guide when service returns.

One Personal Device view, now filterable by network

Dashboard visualizations now switch together between All, Home, and Away. Personal Device keeps the same label in every view, while Home matches the public network saved during router setup and Away means a different observed public network—not a precise physical location.

Protection status and activity controls are easier to scan

Protection status, protection level, and pause controls now stay together at the top of the dashboard. Activity filters are grouped into one labeled row, and Activity places domains beside protection and settings changes. Privacy Settings now focuses on household settings without the observations, scorecard, evidence, or letter tools.

The Remote and Chrome Extension now work alike

Both controls now use the same pause choices, status wording, personal-device addresses, and household custom rules. The extension keeps browser-specific sign-in and recovery help while controlling the same household state.

Protect Android devices and Chromium browsers away from home

Network & Device Setup now provides dedicated Android Private DNS and Chrome or Edge secure-DNS guides after the household router is connected. Each device choice shows only the DNS address and instructions it supports.

Rules and device addresses are back in the extension

The Chrome extension now includes custom allow/block rules and your personal-device DoH and DoT addresses alongside pause controls. The unused Options page has been removed, so everything is available directly from the toolbar popup.

Encrypted-DNS activity is never masked by saved summaries

Phones and laptops using this household's DoH or DoT endpoint now reliably appear as Personal Device activity, including blocked lookups. Saved summaries that predate encrypted-DNS detection are rebuilt from the Datante Admin activity log instead of being carried forward without it, and the dashboard now says when a background refresh could not finish.

Supported history is backfilled from Datante Admin

Saved 24-hour, 7-day, and 30-day summaries are refreshed from the Datante Admin activity log when an older summary predates encrypted-DNS classification. History outside Datante Admin's available window stays unchanged rather than being guessed.

Encrypted DNS activity gets a clear home

When an otherwise unrecognized device uses this household's DoH or DoT endpoint, Datante now groups its activity as Personal Device (Smartphone, Laptop, etc.). Known device-family matches still take priority.

Blocked and allowed views stay in sync

One shared Blocked or Allowed choice now updates the headline, hourly chart, device-family activity, category summary, and Collector Map together. Blocked remains the default.

Every inferred family remains visible

Device-family views include confirmed, likely, possible, historical, and allowed-only families. Labels now make clear that these are DNS-inferred activity families, not physical-device or unit counts.

Unrecognized activity is optional and reconciled

Unrecognized household activity is hidden by default across both dashboard views and can be included with one shared toggle. The visible headline changes with that choice so it matches the activity shown.

Unrecognized activity is now visible without guessing

Datante continues to name a device only when its DNS pattern is specific enough. Everything else now appears as one Other Unrecognized Devices group, so you can see the activity without Datante collecting hardware IDs, MAC addresses, or browser fingerprints.

More concrete smart-home devices appear again

Device activity now distinguishes Confirmed, Likely, Possible, and Historical family inference. The dashboard shows the five families with the most tracking blocked first, with a Show all control for the complete recognized list. Saved 24-hour, seven-day, and 30-day summaries are promoted as rules improve; incomplete old rows retain exact totals without invented route detail.

Refined labels leave the low-confidence review queue

Saved domain refinements now take effect in the low-confidence review immediately, so entries you have already classified no longer keep appearing as candidates for the same rule.

Follow collector activity from labels to device hints

The collector map now starts with clear Label + Data and Device + Hint groups. You can break those groups apart, filter the routes, and switch between blocked and allowed requests without turning the map into a physical-device inventory.

Collector maps now follow the selected date range

Changing to seven or 30 days shows the saved summary immediately, refreshes that exact range in the background, and clears filters left over from the previous range. Refined collector labels also keep their saved data classification.

Your saved dashboard summary stays visible while it updates

Seven- and 30-day views now use your last saved private summary immediately, then update it in the background. If an update cannot finish, you can keep using the saved data and try again instead of waiting through an endless loading message.

Device check now explains exactly what it can measure

The check now separates a profile with no browser block signal from a connectivity problem and a likely bypass. It no longer treats an online resolver as proof that this device is using it, and retry guidance is clearer when the check cannot run.

Subscription updates from our payment provider are flowing again

A misconfigured notification address meant our payment provider couldn't reach us for a few days in mid-August. The address is fixed, deliveries are confirmed healthy, and the one affected signup was reviewed and corrected — no payments or personal data were affected.

Protection levels renamed to plain English

Your blocking level now has a name that tells you what it does: Essential (tracker blocking only), Standard (adds ad blocking — the default), and Maximum (adds malware blocking and safe search). Your settings are unchanged — only the labels are new.

Bot detection and abuse protection

Our web servers now detect automated traffic (bots, scrapers, uptime monitors), keep it out of your analytics, and record it in a security log so abusive networks can be reviewed and blocked via a deny list.

Security logging documented in the privacy policy

The privacy policy now describes our security request log in full: what it stores (IP, path, user agent, sanitized referrer — never bodies, cookies, or tokens), its 30-day retention, the legitimate-interest legal basis, and admin-only access.

More accurate, still minimal analytics

Product events keep the same small, conservative vocabulary (page views, key actions, conversions) and are now attributed correctly instead of to our servers. Nothing new is collected.

Instant opt-out sync

Turning on “Disable activity recording” in your Privacy preferences now notifies our analytics platform immediately, in addition to stopping all events at the source.

Active page highlight in navigation

The top nav now shows a white highlight on the current page link and adds aria-current='page' for screen readers — no more guessing where you are.

Report a Problem — always one click away

A report button appears in the header on every authenticated page. It opens a modal, shows exactly what will be sent (page path, browser, timestamp — no personal data), submits to our support queue, and gives you a reference number.

30-second Undo for policy and pause changes

After switching your blocking level or pausing filtering, an Undo toast appears for 30 seconds. Tap Undo to reverse the change instantly — idempotent, so tapping twice is safe.

Privacy preference changes now appear in Activity history

Updating your privacy preferences or notification settings now writes a record to your Activity history page, so every change to your account is visible in one place.

Anonymous page-view tracking — server-side, not browser-side

Public pages now fire a server-side page_view event using your anonymous session cookie. No query-string parameters, no browsing history, no browser beacons. Opt out at any time under Privacy settings.

Updated privacy page with full analytics inventory

The privacy page now lists every event we collect and everything we explicitly never collect — DNS query history, browsing history, URL parameters, search queries, AI prompts, tokens, and more.

Extension download event

When you download the optional desktop extension ZIP from your dashboard, a server-side extension_downloaded event is fired. The extension itself has no analytics runtime and cannot see your browsing.

What's New modal now fully keyboard and screen-reader accessible

The modal traps focus while open, closes with Escape, returns focus to the page when dismissed, and now includes proper ARIA dialog markup. Animations also respect your system's reduced-motion preference.

Usage analytics connected to your Pulse dashboard

Product events — policy changes, pause starts, activation — are now tracked server-side and flow into the Pulse Analytics dashboard in real time. No browser-side beacons, no ad-blocker interference. Operator accounts and users who have opted out of recording are automatically excluded at both the app and the Pulse ingest layer.

A/B experiment tab in Pulse

The Pulse dashboard now has an Experiments tab showing every running A/B test with per-variant assignment, exposure, and conversion counts plus lift-vs-control. Variants are assigned deterministically per user — same user always gets the same variant across sessions.

No more guessing during router setup

If your subscription is active but your router isn't connected yet, the dashboard now shows a clear setup checklist and a direct link so you know exactly what to do next.

Full account activity history

Every policy change, pause, resume, and subscription event is now logged on your Activity page — so nothing that happens to your account feels like a black box.

Keyboard, screen reader, and reduced-motion support

All modals and tooltips now work correctly with keyboard navigation and screen readers, and respect your system's reduced-motion preference.

Pause blocking on demand

Suspend filtering for 30 minutes, 1 hour, 2 hours, or 4 hours straight from the dashboard — no settings changes — and it resumes automatically.

Dashboard always up to date

Stats and the device chart refresh automatically when you open the dashboard — no manual refresh needed.

Device chart now shows your actual gear

The breakdown chart groups your detected devices — Chromecast, Fitbit, Echo, and more — by CTV and IoT, matching the device cards below.

Weekly recap in your inbox

Every active household now gets a weekly email summarising total blocks, week-over-week change, and the top offending domains — no setup required.

ISP detection during setup

Setup now detects your ISP automatically and surfaces a warning for carriers known to hijack DNS or run CGNAT, so you know up front when extra steps may be needed.

Block trackers at the network level

Point your router at Datante and every device in your home — TVs, speakers, phones, IoT — is covered by Standard, Enhanced, or Maximum blocking, with a live dashboard and one-click level switching.