Only DNSCrypt provides any privacy. If you setup your relays properly.