← Privacy Guides

Browsing & network

Private search engines: what each one really sees

Switch your default search to an engine that does not build a profile on you, and understand which ones run their own index and which just resell Google or Bing results behind a privacy layer.

  • Low threat
  • Time 15 minutes
  • Difficulty Easy
  • Last verified

What this protects, and what it doesn't

Protects

  • Search profiling: a privacy-respecting engine does not tie your queries to an advertising profile or a long-term search history.
  • Cross-site retargeting from the search box: you stop feeding the big ad networks the intent signals in your queries.
  • Account-linked history: if you are signed out of a Google or Microsoft account, your searches are not added to it.

Does not protect

  • The engine still sees the query and your IP. "Private" means it promises not to profile you, not that it is blind. Read its policy and pick one you are willing to trust.
  • It is not anonymity. To hide that you are the one searching, you need Tor Browser; a private engine alone does not do that.
  • Many engines are front-ends. Startpage returns Google results and DuckDuckGo leans on Bing, so result quality and gaps follow the upstream engine.
  • Clicking a result hands you to that site, which sets its own cookies and trackers; a search engine cannot change that.

Prerequisites

  • A browser where you can change the default search engine (every major browser lets you).

Step by step

  1. Know who actually runs the index

    Only a few engines crawl the web themselves. Most "alternative" engines are privacy front-ends over Google or Bing, which matters because their coverage, ranking and blind spots are inherited from the upstream engine.

    • Own index: Brave Search runs its own independent, built-from-scratch index; Mojeek runs its own small independent crawler. Google and Bing (Microsoft) run the two large commercial indexes.
    • Front-end over Bing: DuckDuckGo draws its main results from Bing, combined with its own sources and features, while keeping your searches off an ad profile.
    • Front-end over Google: Startpage returns Google results through a privacy proxy; it does not index the web itself.
    • Metasearch: SearXNG is open-source software that aggregates results from many engines; you either self-host it or use a public instance.
  2. Pick one that matches what you want

    There is no single best answer; match the engine to what you value.

    • Independent results, no profiling: Brave Search. It says it does not profile you, and offers an anonymous usage mode.
    • Familiar results, strong brand policy: DuckDuckGo. Good defaults, but the results are Bing's.
    • Google's results without Google's tracking: Startpage, which also offers an "Anonymous View" proxy to open results. Note that Startpage is part of an advertising group (System1); weigh that against the privacy proxy.
    • Full control / self-hosting: SearXNG on your own server, so no third party sees your queries at all. On a public instance you are instead trusting that instance's operator.
  3. Set it as your default and remove the others

    Change the browser's default search engine in settings so the address bar uses it. On Firefox: Settings → Search. On Chrome/Edge: Settings → Search engine. On Safari: Settings → Search (DuckDuckGo is built in). Then delete the old engine from the list so an autocomplete slip does not send a query to it.

    On mobile, set the same default in the browser app, and if you use a search widget, point it at the same engine.

  4. Use the escape hatches deliberately

    When a private engine gives a weak result and you want to check Google, do it on purpose rather than switching your default back. DuckDuckGo's "!bangs" (for example !g) send one query straight to another engine; Startpage's "Anonymous View" opens a result through its proxy. Each of these hands that one query to the upstream engine, so use them knowingly.

  5. Stop the network from reading your searches

    Changing engine stops the engine from profiling you, but your network and DNS resolver can still see where your traffic goes. Pair this with encrypted DNS so your searches and the sites you open are not plainly visible on the local network. See Encrypted DNS.

Common mistakes

  • Assuming a private engine hides who is searching. It hides you from profiling, not from the engine or from Tor-level anonymity needs.
  • Treating a Google front-end as independent: if Google omits or ranks something a certain way, Startpage shows the same.
  • Staying signed in to a Google or Microsoft account in the same browser, which re-links your activity regardless of the search box.
  • Trusting a random public SearXNG instance with sensitive queries; the operator sees every search. Self-host if that matters.

Going further

Combine a private default search with a content blocker so result pages and the sites you visit carry fewer trackers (see Ad and tracker blocking), and with encrypted DNS (see Encrypted DNS). For searches you genuinely need unlinked from you, run them in Tor Browser.