Kagi

Minimal collection by design — searches are not tracked, cookies are session-only, and Kagi explicitly states user data is a 'liability' it doesn't want; server logs are purged on strict schedules and AI conversation threads are auto-deleted after one day.

Data is not sold, payment information is kept structurally separate from search activity, and third-party integrations (maps, payments, SSO) are on-demand and clearly disclosed; the one notable gap is 'whenever possible' hedging on AI providers, which falls short of a categorical guarantee.

Kagi offers more anonymity pathways than almost any comparable service — cryptocurrency payments, Tor access, Privacy Pass, and pseudonymous email registration — and a GDPR/CCPA rights addendum exists; the policy is lighter on self-service data export and granular deletion controls than best-in-class privacy services.

Kagi's business model (subscriptions, no advertising) is structurally aligned with its privacy mission, the warrant canary lists zero government requests with specific numbers, the PBC legal structure provides mission protection, and the policy is specific and changelog-dated; the main limitation is US/Delaware jurisdiction and the absence of named third-party security audits.