How Private Relay Blocks Web Tracking in iOS 15

Apple introduced iCloud Private Relay in iOS 15 as a built-in privacy feature designed to shield users' Safari browsing activity from network providers, advertisers, and websites. By routing internet traffic through a specialized two-hop relay architecture, the service decouples a user’s identifying IP address from the specific websites they visit. This structure ensures that no single entity—not even Apple—can build a profile linking who you are with what you view online.

The Dual-Hop Architecture

Traditional internet browsing exposes both your IP address (identity and location) and your DNS requests (the websites you visit) to your internet service provider (ISP) and the network you are connected to. iCloud Private Relay dismantles this tracking chain by dividing the routing process across two separate relay stations:

  1. The Ingress Relay (Operated by Apple): When you enter a URL in Safari, your connection is encrypted. The first relay receives the encrypted request and sees your original IP address. However, it cannot see the destination website because the DNS request and destination address are encrypted with a key that only the second relay holds.
  2. The Egress Relay (Operated by Third-Party Partners): The encrypted packet is passed to an egress relay managed by trusted third-party content delivery networks (CDNs), such as Cloudflare, Akamai, or Fastly. This second relay decrypts the destination URL to fulfill the web request. Crucially, it does not know your original IP address; it only sees the traffic coming from Apple’s ingress relay.

Encrypted DNS and Oblivious Routing

Private Relay protects DNS requests using Oblivious DNS over HTTPS (ODoH). When a browser resolves a domain name, ODoH wraps the query in an additional layer of encryption before sending it.

Because of this separation, your ISP or local network operator only sees that you are connected to an Apple relay server. They cannot observe your DNS queries or the domains you access, preventing them from logging and selling your browsing history.

Masking IP Addresses

Websites commonly use IP addresses as persistent identifiers to track user behavior across multiple sessions and stitch together digital profiles. Private Relay prevents this by assigning a randomized, temporary IP address at the egress relay.

By default, Private Relay maintains your general location (such as your city or broad geographic area) so that local search results, weather, and region-locked content continue to function, but it strips away any specific identifying network characteristics. Users can also choose a broader "country and time zone" setting to anonymize location even further.

Scope of Protection

Private Relay functions automatically for:

  • All browsing conducted within Safari.
  • DNS lookup queries across the entire operating system.
  • Unencrypted HTTP traffic generated by native apps.

By ensuring that the entity with your identity never knows your destination, and the entity delivering your destination never knows your identity, iOS 15 prevents advertisers, data brokers, and network carriers from monitoring and mapping your web activity.