Runs entirely on your phone
Block ads and trackers on Android — without handing your traffic to anyone
ClearDeck is a local network firewall. Connections that match a rule are rejected instantly; everything else goes straight out to the internet. No remote node, no subscription, no traffic relay.
- ad.doubleclick.net BLOCKED Ad blocking
- www.google-analytics.com BLOCKED Tracker blocking
- tracker.example-cdn.com BLOCKED Tracker blocking
- ads.example-app.com/promo BLOCKED Deep ad blocking
- api.example.com ALLOWED
Illustration. 452,521 domains ship inside the app — no download needed.
Three common ways to block ads on Android
Each of them costs you something. ClearDeck takes a fourth path: decide locally, in a firewall rule table on the device. No server in the middle, no root.
VPN blockers that relay traffic
Your traffic is routed through someone else’s server to be filtered. You lose the ads, and you hand over your browsing history with them — usually for a monthly fee.
Root-based hosts files
Requires root, edits system files, and can break OTA updates and banking apps. Rooting a modern phone is a losing battle.
Browser extensions
Only cover the browser. Ads inside apps and an app’s own tracking calls are untouched.
Connections are judged on your phone: a match is rejected on the spot, and everything else goes straight out. No remote node, no subscription, no relay — there is nowhere for traffic to be relayed to.
What it looks like
The dashboard puts four numbers first: live connections, traffic, how much was blocked, and how much traffic that saved. Detail by app and by destination sits below.
- Blocked breakdown split by module, so you know ads from trackers
- Destinations grouped by registrable domain, so CDN subdomains do not fragment
- Top 5 apps, one tap from the full history
Two layers, each doing its own job
The hostname is often the whole answer
When a connection lands on an ad domain, the hostname alone decides it. Domain rules are plain host lists — nothing is decrypted, and a match is rejected on sight. 441,386 of them ship in the app.
Some ads need the full address
On one hostname, the article and the ad slot can share a domain. Deep inspection decrypts the connection on your phone, reads the full path, and judges that. /article is allowed; /promo is not. 11,135 URL rules, off until you turn it on.
Features
See each app’s network
How much every app sent, how much was blocked, and what it connected to recently.
Allow or block, one line at a time
Turn a single access-log entry into a rule — scoped to that app only if you want.
Import your own lists
.yaml / .txt / .mrs files and subscription links, with the kind detected for you.
Takes over at boot
With Android’s always-on VPN enabled, protection starts with the phone.
Encrypted DNS
Domain lookups travel over an encrypted connection, with an address you can change.
Power saving
One switch widens the sampling periods and pauses deep inspection — with the cost stated up front.
Get notified when ClearDeck launches
We are finishing the first release. Leave an email and we will tell you when it is ready — once, and nothing else.
Signups will open shortly.
Only used to tell you about the launch. No newsletter, no sharing.