Email or username:

Password:

Forgot your password?
Ben's posts Post Back to profile
Top-level
Jcrabapple

@eighthourlunch @henry_barreto @TheBreadmonkey From their privacy policy:

Searches are anonymous and private to you. Kagi does not log and associate searches with an account.
We do not log or store your IP address. Your IP address is used only temporarily when enriching location/maps searches, and is not shared with any other party.
We only store cookies needed for site functionality.
We do not use any web browser analytics or other frontend telemetry.
We do not display any ads, or have any first-party or third-party tracking in service of ads.
We collect only the data needed to provide and protect the service.
We proxy all images to prevent tracking from third parties.
We use HTTPS encryption everywhere. All passwords are hashed and salted.

Of course, if you don't trust privacy policies or any third parties you can self-host SearXNG or Whoogle.

3 January at 16:53 | Wall-to-wall | Open on dmv.community
7 comments
Jcrabapple
meejah

@jcrabapple @eighthourlunch @henry_barreto @TheBreadmonkey Ooo, that part (privacy pass) is interesting -- do they have more details on this somewhere?

(This _should_ allow users to prove to Kagi that they have a valid subscription without revealing who they are -- but of course the details are very important here ;)

3 January at 19:54 | Open on mastodon.social
Jcrabapple

@meejah @eighthourlunch @henry_barreto @TheBreadmonkey yes that is the goal, but it was just mentioned on their 2024 year end call. There should be more details coming soon.

3 January at 19:55 | Open on dmv.community
meejah

@jcrabapple @eighthourlunch @henry_barreto @TheBreadmonkey Cool. I've previously worked on a privacy-pass based payment system, so I'm very curious how they're using it here :)

3 January at 19:57 | Open on mastodon.social
Jcrabapple
meejah

@jcrabapple @eighthourlunch @henry_barreto @TheBreadmonkey Just watched that segment: super cool!

This sounds ideal, and great use of Privacy Pass. I would still like a few more details (like when they rotate server keys, how many tokens are issued per request, and how those token-issuing requests work).

In any case, the answers to those will only slightly affect what Kagi learns; they will _not_ be able to associate searches to particular users (just that a user is legitimate).

3 January at 21:42 | Open on mastodon.social
Chris Bussard
Go Up