Skip to content
Back to all categories

Search engines

Private search engines and metasearch tools, compared by where their results come from, who can see your queries and who runs them.

Last reviewed 路 13 entries

Your search history is one of the most revealing records about you. It shows health worries, money problems, legal trouble, relationships and where you are, often in your own words. A conventional engine ties those queries to an account, cookies, your IP address and your device, keeps them, and can be ordered to hand them over.

The engines on this page promise not to build that profile. They differ in where their results come from, who can see your queries on the way, and how much you have to trust the operator. None of them can protect you from what you type: treat every query as something a stranger may read.

ToolVerdictPlatforms
SearXNGRecommended
4getRecommended
MetaGerRecommended
HeexyRecommended
MojeekRecommended
Marginalia SearchRecommended
DuckDuckGoUse with caution
Brave SearchUse with caution
StartpageUse with caution
KagiUse with caution
AhmiaUse with caution
LanternUse with caution
TorgleUse with caution

How private search works

Own index or metasearch

An own-index engine runs a crawler, a program that downloads and catalogues web pages, and answers your query from its own copy of the web. Independent indexes are rare: besides Google and Microsoft Bing, examples include Brave Search, Mojeek and the European EUSP project, and small specialised ones such as Marginalia. Building an index is expensive, so smaller ones miss more rare and very recent pages.

A metasearch engine has no index of its own, or only a small one. It forwards your query from its own servers to one or more other engines and shows you their results. The upstream engine sees the query but not your IP address or cookies; the metasearch operator sees your IP address and the query. SearXNG, 4get, MetaGer and Startpage work this way, and DuckDuckGo takes most of its web results from Bing.

EngineResults come fromOperator and jurisdictionAccount or payment
SearXNGOther engines you choose, queried by the instanceWhoever runs the instanceNone
4getOne upstream engine per search (Google, Brave, DuckDuckGo, Mojeek and others)Whoever runs the instanceNone
MetaGerOther engines (Brave, Mojeek and Google results via the Serper API) plus small own indexesSUMA-EV, a non-profit, GermanyPrepaid key, cash accepted
HeexyUndisclosed sources plus its own crawlerSmall team, Czech lawNone (optional account)
MojeekOwn indexMojeek Limited, UKNone
Marginalia SearchOwn index, focused on non-commercial sitesViktor Lofgren, SwedenNone
DuckDuckGoMostly Bing, plus its own crawler and other partnersDuckDuckGo, USNone
Brave SearchOwn index, optional Google fallback in the Brave browserBrave Software, USNone; paid Premium removes ads
StartpageGoogle and BingSurfboard Holding BV, Netherlands; majority owner System1 (US)None
KagiOwn small indexes, licensed engines (Mojeek, Brave, Yandex and others), Google via third-party APIsKagi, a Delaware public benefit corporation, USPaid account
AhmiaOwn index of Tor onion servicesAhmia project, Finnish and EU lawNone
Where results come from and who runs each engine

What changed in 2025 and 2026

  • Google requires JavaScript (January 2025). Google began refusing searches from browsers with JavaScript turned off, citing bots and spam (TechCrunch). Metasearch engines that fetch Google results now depend on workarounds, such as requesting a simpler page layout (SearXNG docs).
  • Bing Search APIs retired (11 August 2025). Microsoft shut down its public search APIs and pointed customers to an AI agent product instead (Microsoft). DuckDuckGo said only the self-serve version was being retired (Privacy Guides discussion); smaller engines lost their simplest way to buy Bing results.
  • US court orders Google to share (September 2025). In the US antitrust case the judge ordered Google to give qualified competitors access to search index and interaction data and to offer result syndication, but did not order a sale of Chrome (AEI summary). In January 2026 Kagi reported that the details were still being worked out (Kagi).
  • Google sues a scraping service (December 2025). Google sued SerpApi, which resells scraped Google results, for circumventing its anti-bot system (IPWatchdog). Kagi says it buys Google results from third-party providers of this kind as a stopgap, because Google offers no search API (Kagi).
  • A European index (2025-2026). EUSP, a joint venture of Ecosia and Qwant, began serving results from its own index in France in August 2025 and in Germany in July 2026, and sells access to other services through an API called Staan (heise, 2025; heise, 2026).
  • AI answers everywhere. Google AI Mode, DuckDuckGo Search Assist and Duck.ai, Ask Brave and Kagi Assistant all send your words to a language model. See AI answers in search.

The common thread: access to Google and Bing results is getting harder and more expensive for small engines. Metasearch services break more often, and independent indexes matter more than they did.

Use with caution

Better than Google for privacy, but each comes with a real trade-off: dependence on Bing or Google, an advertising business in the background, data collection switched on by default, or a paid account.

DuckDuckGo

Use with caution
DuckDuckGo website (opens in a new tab)

The best-known private search engine, run by a US company. Its traditional web results come largely from Microsoft Bing, and its ads are served through Microsoft Advertising.

Platform Support

WebNo accountOnion service

Advantages

  • No account; says it does not save IP addresses with searches
  • Official onion service
  • Requests to partners go through its own servers
  • AI features can be switched off, or use noai.duckduckgo.com

Drawbacks

  • Web results largely from Bing
  • Ad clicks are handled by Microsoft Advertising
  • Keeps anonymised search queries to improve results
  • Sends usage pings to improving.duckduckgo.com (it says without IPs or unique IDs)
  • Search Assist AI answers appear on some queries unless set to Never
  • US jurisdiction

Startpage

Use with caution
Startpage website (opens in a new tab)

Dutch search engine that forwards your query to Google and Bing without your IP address and shows their results. Majority-owned since 2019 by Privacy One Group, part of the US advertising company System1.

August 2026: Firefox 154 added Startpage as a built-in search option in Germany, France, Austria, Switzerland and the Netherlands (Mozilla).

Platform Support

WebNo account

Advantages

  • Google and Bing results without an account or tracking cookies
  • Says it does not record IP addresses or log searches
  • Anonymous View opens result pages through its proxy
  • Dutch and EU law (GDPR)
  • No AI answers

Drawbacks

  • Majority owner System1 is an advertising company
  • Sponsored links come from Google's ad service
  • In 2024 users found a fingerprinting script; Startpage said it was for bot detection
  • Depends on continued access to Google and Bing

Kagi

Use with caution
Kagi website (opens in a new tab)

Paid, ad-free search engine run by a US public benefit corporation. It combines its own small indexes with licensed engines, including Mojeek, Brave and Yandex, and Google results bought through third-party APIs.

February 2025: Kagi added Privacy Pass, an IETF-standardised token scheme, and a Tor onion service (Kagi).

Platform Support

AndroidWebBrowser extensionOnion service

Advantages

  • No ads; funded by subscriptions
  • Privacy Pass makes searches unlinkable to your account (Professional plan and up)
  • Official onion service
  • Accepts Bitcoin and Lightning via OpenNode
  • Short retention: 7 days for load balancer logs, 1 day for Assistant threads

Drawbacks

  • Requires an account with an email address (can be pseudonymous)
  • Privacy Pass not available on Trial and Starter plans
  • Search engine is not open source
  • Licenses results from Russia-based Yandex, criticised by some users
  • Google results bought from third-party SERP API resellers, by its own account
  • US jurisdiction; no Monero

AI answers in search

Most engines now put an AI-generated answer above or beside the results. That adds one more party that processes your words: whoever runs the language model. Where the prompt goes and how long it is kept depends on the engine.

  • Google AI Mode and AI Overviews. With Search history switched on, AI Mode searches are saved to your Google account. Google says it uses what people search for and their feedback to improve its AI features, and that the data its human reviewers see is disconnected from accounts (Google help).
  • DuckDuckGo. Search Assist and Duck.ai can be switched off under Search Settings, AI Features, or you can use noai.duckduckgo.com. Duck.ai removes your IP address before forwarding a prompt and says its model providers agreed to delete prompts after replying, with exceptions such as up to one hour of prompt caching (Duck.ai privacy).
  • Brave Search. Ask Brave conversations are erased after 24 hours of inactivity, and shared conversations are kept for up to seven days (privacy notice).
  • Kagi. Assistant threads are deleted after one day unless reported (privacy policy).

A prompt is usually longer and more personal than a search query. Treat it the same way: leave out names and details that identify you. The AI guide covers chat assistants in more depth.

Running your own instance

Running your own SearXNG or 4get instance means you no longer have to trust a stranger's server, and you decide what is logged. The SearXNG documentation puts it plainly: users of a public instance cannot know whether their requests are logged, aggregated or passed on.

  • Share the instance with family or friends so that queries mix together.
  • Route its outgoing requests through Tor or a proxy. SearXNG supports this with the proxies and using_tor_proxy settings (docs); expect more CAPTCHAs and blocks from upstream engines.
  • Rent the server with as little personal data as possible; see server hosting.
  • Keep it updated. 4get, for example, fixed a potential cross-site scripting bug involving scraper-supplied data on 27 October 2026 (source).
  • If you use a public instance instead, pick one from searx.space whose hosting network and country you are comfortable with. The list also shows TLS grades and uptime.

Practical tips

  • Set your chosen engine as the default in your browser, and check private windows too: some browsers set their default separately.
  • Turn off search suggestions if you do not want every keystroke sent to the engine while you type (see the browser guide).
  • Do not sign in to a search engine. One account ties all your queries together.
  • Private or incognito mode only stops your own device from keeping history and cookies after you close the window. It hides nothing from the search engine, your network or your internet provider.
  • For sensitive searches, use Tor Browser. DuckDuckGo, Kagi, MetaGer and 4get publish onion addresses; other engines may show CAPTCHAs or block Tor.
  • A VPN hides your IP address from the search engine but shows your traffic to the VPN provider instead. Choose one with care (VPN guide).
  • Avoid clicking ads. On DuckDuckGo the click is handled by Microsoft Advertising; Startpage's sponsored links come from Google.
  • Shortcuts such as DuckDuckGo "bangs" (!w, !g) send your query straight to another site, which then sees both the query and your IP address.
  • Leave identifying details out of queries: search for the condition, not your name plus the condition.
  • Re-check privacy policies and ownership from time to time. Several engines on this page changed sources, owners or defaults in the past two years.

Further reading