Anonymity on TOR : DisconnectMe versus DuckDuckGo

As far as I know DuckDuckGo doesn't keep yoour data but it doesn't mean you are invisible on Internet when you are searching (you can have someone upon your shoulders)

So, the question is : DisconnectMe versus DuckDuckGo ? The Tor offer "total anonymity" is still a fact ? Or We must add something to keep the same quality of service (like with disconnectMe) ?

Many thanks for your answers Elis

  • Hi Elis - you've already asked a similar question, here. Can you explain in more detail how you think DuckDuckGo is not secure and breaks your anonymity? Commented May 24, 2016 at 16:39
  • It was not a flat affirmation, but a question to be sure -- I wanted also that people like Jens (Jens Kubieziel) give me their point of view. Richard point of view is not bad and I'm going to tell him where and why I saw and think that. Many thanks in advance. Elis
    – Elis
    Commented May 24, 2016 at 18:27
  • Hi Elis - in the blog post that you link to, the user isn't using Tor. They are just using DuckDuckGo. If you use Tor as well as DuckDuckGo then your real IP address isn't exposed, only the IP address of your Tor exit node. The other browser information - for example, the user-agent - is that of the Tor browser. As lots of people are using the Tor browser, then these details will (in theory) be the same as lots of other users, meaning you can't be individually tracked. Commented May 24, 2016 at 19:02
  • Also, at the bottom of that blog post there is an edit saying that the "potentially damaging search term" is no longer passed in the HTTP request. (See "Gabriel has now fixed this problem."). Commented May 24, 2016 at 19:04

1 Answer 1


The answer is "Whichever you prefer".

You should not blindly trust in privacy policies and promises of not recording IPs. These promises are what is known as "Privacy-by-Policy", that is to say: they have a policy or even a law that says your data isn't collected by them and is subject to certain levels of privacy.

The flaw is the assumption that policy and the law both are immutable and have been "correctly" interpreted; tomorrow a law might be passed that removes all the protection for your data. Infact we know this not to be the case already. Previous work by the late, great Caspar Bowden shows why these policies are mostly meaningless.

Instead you should approach requirements of real privacy and anonymity with "Privacy-by-Design". You should operate such that you need not put ultimate trust in a single law, policy, or entity to protect you.

For example, if you use Tor Browser to search on an arbitrary search provider from a fresh "identity" (e.g. newly started Tor Browser or after use of the New Identity button) then the provider might log the IP and the search term and your cookies but it would not be able to determine who made the search and infact, all other users using fresh identities would look the same, they could not be distinguished except by what they were searching for. If you made use of New Identity once you were finished with the first search, then made a second, unrelated query the provider would be unable to meaningfully distinguish between your first search, your second search and the searches of all other Tor Browser users doings the same.

I should point out that I think we should support and respect all providers like Disconnect, DuckDuckGo and StartPage because while their policies might not be the best protection mechanism for you as a user (they can be seen as a best effort in a hostile environment), these companies are taking steps to allow and encourage anonymous use of their services and supporting the technologies that enable it, and that is hugely important.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .