Private DNS seals the request your device makes to look up a website's IP address, so your carrier can't see the website ...