What runs where
The tools run in your browser. The IP and VPN checks ask public lookup services for the address you connect from, the same thing any website sees. The ad blocker test asks each tracking server for one file and only checks whether the request went through. The QR code scanner reads the image on your device and never uploads it. Results stay in your browser tab and aren't sent to us.
On iPhone
On iPhone and iPad, Mistero VPN covers the same ground: a VPN with WireGuard, OpenVPN or IKEv2 and a Kill Switch, ad and tracker blocking in Safari, and QR codes checked before you visit them.