Three resolvers on the same anycast network worldwide. One answers everything; one refuses ads, trackers and known malware; one adds DNS64 for IPv6-only networks. All speak plain DNS, DNS over HTTPS, DNS over TLS and DNS over QUIC, and none keeps a log of what you asked.

Nothing that says who asked for what. The resolvers keep no per-query log at all — not the name, not your address, not a hash of either. What does exist is counters, and they are counted in a way that cannot be turned back into a query: how many queries a node answered, how many were filtered, the mix of record types and results, and — separately — which networks and countries traffic arrived from and which names were popular. The last two are counted independently and never combined, so no stored record associates a network with a name. A name is counted only after it has been requested at least 50 times on one node within one five-minute window. Your address is used to look up a network and a country and is then gone. There is no account, nothing to sign in to, and nothing to sell.

A network gets 500 queries per second per node, counted per /24 or per /64 rather than per address, and the allowance refills continuously. Going over it does not block anything: address lookups are answered with a page that says what happened, and everything else gets an empty answer so mail and service lookups fail cleanly rather than being pointed at a web server. A household resolver typically issues fewer than 1 query per second in total, so the limit is not reached by ordinary use.