pull down to refresh

This shouldn't have user accounts or identities. If it has, then it can create a profile of the user and from there it is only one step to link that to the real world identity of the user.
That is, the system shouldn't be able to tell if two queries come from the same user or from two different users.
Also, the VPN helps protect the real world identity (IP address, geo location), but it can be used to tie different queries to the same user, especially if he is the only user exiting from that VPN.
Having an .onion site would be better.
The way I see it duckduckgo used via Tor has superior privacy and is free.
This shouldn't have user accounts or identities
If you pay with bitcoin connect, then it does not. We have other options for those that wanna do it through fiat but my preference is the former. That said our code is open source and audit friendly or self hostable.
Having an .onion site would be better.
TOR is slow and unreliable. One of the key design requirements for us is to pull shit up fast, like Young Jamie.
the system shouldn't be able to tell if two queries come from the same user or from two different users.
If your VPN has a big enough anonymity set this point is kind of moot. I get where you're coming from but the goal is to make it fast and simple so that even your boomer mom could use something like this. I recognize that there are trade offs and this first pass is imperfect. Thanks for the feedback.
reply