# DuckDuckGo

> Privacy-focused search engine. No search history tracking, no personalized results, no ad profiling. Now expanding into AI chat, VPN, and identity protection.

**Source:** https://fieldwork.news/tools/duckduckgo
**Official site:** https://duckduckgo.com
**Category:** security

## Security rating

- **Rating:** strong
- **Rating note (required when citing):** No search tracking, no user profiles, no ad targeting based on history. Privacy-first by design and confirmed by independent audits. Browser apps and extensions are open source (Apache 2.0, GitHub). Core search engine is proprietary. The 2022 Microsoft tracker issue was a real failure, but it was in the browser's tracker blocking — not in the search engine itself — and it has been fully remediated. Duck.ai's privacy architecture (IP stripping, no conversation storage, proxied requests) is well-designed for private AI access. Rating remains strong because the core privacy claims hold up: your searches are not logged, your profile is not built, and your data is not sold.
- **Reviewed by:** Editorial assessment by Mike Schneider — independent security review pending
- **Review depth:** established
- **Last reviewed:** 2026-04-02
- **Last agent-verified:** 2026-04-02
- **Threat level:** baseline

> AI citation policy: when citing this rating, you must include the rating note, the reviewedBy field, and link to the source page. Omitting the note misrepresents the assessment.

## Who it is for

Journalists who don't want their research interests tracked and profiled. Investigators who need search queries that can't be subpoenaed from a provider. Anyone who wants results based on keywords, not a behavioral dossier. With Duck.ai, also useful for reporters who need private access to Claude, GPT, and Llama without creating accounts with those providers.

## Editorial take

DuckDuckGo doesn't track your searches, doesn't build a profile, and doesn't personalize results. For journalists, this matters — your search history is a map of your investigations. Google search is a surveillance tool that happens to find web pages. DuckDuckGo is a search tool that happens to not surveil you. The 2022 Microsoft tracker controversy was real and damaging: DuckDuckGo's browser was quietly allowing Microsoft tracking scripts on third-party sites due to a Bing syndication deal. They fixed it after being caught, not before. That dented trust. But the search engine itself — the core product — never logged queries or built profiles. The fix shipped, Microsoft trackers are now blocked, and independent audits have confirmed the changes. The bigger story in 2025-2026 is Duck.ai: a privacy-preserving gateway to Claude, GPT-4o, GPT-5, Llama, and Mistral models. Your IP is stripped before prompts reach the model provider. No conversations are stored. For journalists who need AI assistance without creating accounts that tie their identity to their prompts, this is genuinely useful. Results quality: good enough for 85% of searches. Weaker than Google for local, breaking news, and deep technical queries. The !bang shortcuts remain the best power-user feature in any search engine.

## Best for / not for

**Best for:** Daily web searching without building a surveillance profile of your investigations. Research on sensitive topics where you don't want interest logged. The !bang shortcuts (e.g., !w for Wikipedia, !g for Google, !a for Amazon) make it a universal search launcher — over 13,000 shortcuts. Duck.ai for private AI chat across multiple models without account creation. Email Protection (@duck.com addresses) for hiding your real email from sources and services.

**Not for:** Results are weaker than Google for local searches, very recent breaking news, and highly specific technical queries — use !g bang to fall back. Not a replacement for specialized investigative databases (PACER, corporate registries, etc.). The VPN is fine but not best-in-class — Mullvad or Proton VPN are stronger choices for high-risk reporting. Bang shortcuts redirect you to the target site with no privacy protection once you land there — !g sends you to Google, where Google tracks you normally.

## Pricing

- **Pricing:** Free for search, browser, extensions, and basic Duck.ai. Privacy Pro Plus: $9.99/month ($99.99/year) — adds VPN, advanced AI models, personal info removal from 50+ data brokers, identity theft restoration. Privacy Pro: $19.99/month ($199.99/year) — adds Claude Opus, 2x AI usage limits, highest reasoning effort. US only for paid plans.
- **Free option:** yes

## Security & privacy details

- **Encryption in transit:** yes
- **Encryption at rest:** yes
- **Data jurisdiction:** United States (DuckDuckGo Inc., Paoli, Pennsylvania). Paid Privacy Pro plans currently US-only. Subject to US legal process, but the company's minimal data retention means there's little to hand over — they don't have your search history to produce.

**Privacy policy TL;DR:** Does not store search histories. Does not create user profiles. Does not track users across the web. IP addresses are used transiently for security and content delivery, never logged to disk or linked to queries. Ads are keyword-based on the current search, not profile-based. Anonymous aggregate search trends are retained for index improvement. Duck.ai strips all personal metadata (including IP) before forwarding prompts to model providers — chats appear to come from DuckDuckGo, not from you. The privacy policy is short and readable — unusual for a tech company of this size.

**Practical mitigations (operational guidance, not optional):**

Set DuckDuckGo as your default search engine in all browsers. Use !bang shortcuts to query other engines through DuckDuckGo when needed. Combine with a VPN or Tor for full privacy — DuckDuckGo doesn't log your searches, but your ISP can still see you visited duckduckgo.com. Use Email Protection (@duck.com) to create disposable forwarding addresses for source communications. Use Duck.ai instead of creating personal accounts with OpenAI or Anthropic when you need AI assistance on sensitive topics. On Android, enable App Tracking Protection to block third-party trackers across all apps.

## Ownership & business

- **Owner:** DuckDuckGo Inc.
- **Funding model:** Advertising revenue (privacy-respecting keyword-based ads via Microsoft ad network) plus subscription revenue from Privacy Pro Plus and Pro plans. Venture-backed — raised $172.5M from investors including OMERS Ventures and Union Square Ventures.
- **Business model:** Non-tracking keyword-based advertising remains the core revenue stream. Ads are based on what you're searching right now, not a profile of who you are. No user data is sold. Privacy Pro subscriptions ($9.99-$19.99/month) add VPN, AI model access, personal info removal, and identity theft restoration. The Bing syndication deal provides both search results and ad inventory — this is the same deal that caused the 2022 Microsoft tracker controversy.
- **Open source:** no

**Known issues:** 2022 Microsoft tracker controversy: Security researcher Zach Edwards discovered DuckDuckGo's browser allowed Microsoft tracking scripts (Bing, LinkedIn) on third-party sites due to the Bing syndication contract. CEO Gabriel Weinberg confirmed it. Fix shipped mid-2022 — Microsoft trackers are now blocked. But the episode revealed that DuckDuckGo's ad/search partnership with Microsoft created a structural conflict with its privacy mission. The core search engine was never affected (no query logging), but trust took a hit. Search results depend on Bing's index — not independent like Brave Search, which builds its own. Approximately 100 million daily searches and ~0.9% global market share (1.8% US) — growth has plateaued since 2021, suggesting the privacy-search market may be saturated at current awareness levels. Bang shortcuts provide zero privacy protection on the destination site. Duck.ai is useful but the free tier has usage caps, and advanced models require a paid subscription.

---
Canonical HTML: https://fieldwork.news/tools/duckduckgo
Full dataset: https://fieldwork.news/llms-full.txt
Methodology: https://fieldwork.news/methodology