In an era when digital identity has become both currency and vulnerability, Apple's iOS 15 introduces iCloud Private Relay — a quietly radical architecture that routes web traffic through two separate servers, ensuring that no single entity, not even Apple, can simultaneously know who you are and where you browse. The system reflects a broader philosophical shift in how technology companies are beginning to reckon with the surveillance economies they helped build. For users willing to pay a modest monthly fee, it offers something increasingly rare: a structural guarantee of privacy, not merely
How to Enable and Disable iCloud Private Relay on iOS 15
Neither one can see the complete picture of who you are and where you go.
So Private Relay is basically a VPN that Apple built into iCloud+?
It's similar in some ways, but the architecture is different. A traditional VPN routes all your traffic through a single company's server, which means that company can see both who you are and where you're going. Private Relay deliberately splits that into two separate steps so no single entity has both pieces of information.
Right, but we should be clear about what that actually protects. It masks your IP address from websites you visit. It doesn't encrypt the content of your communications—that's handled by HTTPS, which most sites already use. And it doesn't hide what you're doing from your internet service provider, who can still see that you're using Private Relay.
Why would Apple involve a third party at all? Why not just handle both steps themselves?
Because if Apple did both steps, Apple would know everything—your identity and your browsing. By bringing in an outside company, Apple is essentially saying they're willing to give up the ability to see the full picture. It's a structural guarantee.
That's the claim, anyway. The third-party company is unnamed in the documentation, and we don't know what agreements Apple has with them about data retention or what happens if law enforcement requests information.
Can you turn it off if you want?
Yes, it's just a toggle in Settings. And you can also choose how much location information to share—either general location for local content, or just country and time zone for stronger privacy.
It's worth noting this only applies to web traffic through Safari and apps that use the system's networking framework. It doesn't protect all traffic on your device, and it doesn't work on cellular networks in all countries due to carrier restrictions.
So it's part of a broader privacy push from Apple?
Yes. Hide My Email is another feature in iCloud+ that lets you create disposable email addresses for different services. And you can now use a custom domain for your iCloud Mail address.
Le Pouls
- Online tracking has grown so pervasive that even a device's numerical address can be used to map a person's movements, habits, and identity across the web.
- Apple's dual-server relay deliberately fractures the data chain — one server strips your identity, another handles your destination — so that no single actor ever holds the full picture.
- The tension between convenience and privacy is built into the feature itself: users must choose how much location detail websites can infer, balancing local relevance against anonymity.
- Enabling or disabling the relay requires only a few taps in Settings, but each choice carries real consequences for how exposed a user's browsing life remains.
- The broader iCloud+ bundle extends these protections further, offering disposable email addresses and custom domain support to limit how companies link and exploit user identities.
In an era when digital identity has become both currency and vulnerability, Apple's iOS 15 introduces iCloud Private Relay — a quietly radical architecture that routes web traffic through two separate servers, ensuring that no single entity, not even Apple, can simultaneously know who you are and where you browse. The system reflects a broader philosophical shift in how technology companies are beginning to reckon with the surveillance economies they helped build. For users willing to pay a modest monthly fee, it offers something increasingly rare: a structural guarantee of privacy, not merely a promise.
Apple's iOS 15 introduced iCloud+, a paid upgrade to its cloud subscription service that bundles storage with a suite of privacy tools. Its centerpiece is iCloud Private Relay, a feature engineered to encrypt outgoing web traffic before it ever touches the open internet.
The system works by splitting the routing process between two servers. Apple's own server removes your IP address — the identifier that reveals your location and enables behavioral tracking. A third-party server then assigns you a temporary address and forwards your request to the destination site. Neither party ever sees the complete picture: Apple knows your identity but not your destination; the outside company knows your destination but not your identity. The architecture makes profile-building structurally impossible.
Turning the feature on requires only a few taps — through Settings, your Apple ID, and the iCloud menu — where a toggle activates the relay. Once enabled, users can choose between two privacy levels: a default mode that preserves general geographic context so websites can serve locally relevant content, or a stricter mode that reveals only your country and time zone.
Beyond Private Relay, iCloud+ also includes Hide My Email, which generates disposable forwarding addresses to prevent companies from linking accounts or harvesting contact information, as well as support for custom email domains through Apple's mail infrastructure. Together, these features represent a deliberate effort to give users structural — not merely rhetorical — control over their digital exposure.
Apple's iOS 15 brought with it a new paid tier called iCloud+, which bundles additional privacy and storage features into the company's cloud subscription service. Starting at ninety-nine cents per month, these upgraded plans include a feature called iCloud Private Relay—a system designed to encrypt every piece of web traffic leaving your device before it ever reaches the open internet.
The way Private Relay works is deliberately engineered to keep your browsing private from everyone, including Apple itself. When you enable it, your web traffic first goes to a server that Apple operates. That server's job is simple: strip away your IP address, which is the numerical identifier that normally reveals your location and can be used to track your online behavior. Once your IP address has been removed, Apple passes the traffic along to a second server, this one run by a third-party company. That outside company assigns you a temporary IP address and then forwards your traffic to whatever website you're trying to reach.
The decision to involve a third party in this relay system is intentional. By splitting the process between two different entities—Apple handling the identity removal, the outside company handling the routing—neither one can see the complete picture. Apple knows who you are but not which websites you visit. The third-party company knows which websites you're visiting but not who you are. The architecture makes it mathematically impossible for any single actor to build a profile of your browsing habits linked to your identity.
Enabling Private Relay on an iPhone or iPad running iOS 15 takes just a few taps. Open the Settings app, tap your name at the top of the main settings screen, then select iCloud. From there, tap Private Relay and toggle the switch to turn it on. If you decide to disable it later, you'll need to confirm your choice by tapping a confirmation button.
Once Private Relay is active, you have a choice about how much location information websites can infer about you. By default, the system uses the "Maintain General Location" option, which preserves enough geographic detail that websites can still serve you locally relevant content—news from your region, weather for your area, local search results. If you want stronger privacy, you can switch to "Use Country and Time Zone," which tells websites only what country you're in and your time zone, stripping away the more precise location data. You can adjust this setting by tapping IP Address Location within the Private Relay menu.
The iCloud+ subscription also includes other privacy features beyond Private Relay. One is called Hide My Email, which lets you generate unique, random email addresses that automatically forward messages to your actual inbox. This means you can give different email addresses to different websites and services, preventing companies from linking your accounts together or selling your email to marketers. Additionally, iCloud Mail addresses can now be customized with your own domain name, letting you use a personal or business domain as your email address while still using Apple's mail infrastructure.
Citations marquantes
Apple says the involvement of an outside party was designed to prevent anyone, including Apple, from knowing both a user's identity and the website the user is visiting— Apple's stated design principle for Private Relay