DDG has app tracking protection, which runs whether the browser is open or not.

Thanks for the RethinkDNS referral, albeit a bit of a learning curve. I had been using DDG protection for a while (out of laziness), but started to wonder if it cut the mustard.