A VPN gets most of the attention in a privacy setup, and for good reason. It hides your IP address and encrypts traffic from the network you are on. The search bar in every browser tab is a different surface. A VPN alone does nothing about it. Every query typed into a mainstream engine is a small, timestamped confession of intent — what you are worried about, shopping for, researching, or trying to diagnose at 2 a.m. That data gets logged, linked to an identifier, and monetized whether or not your connection is encrypted.
Laura Bennett’s September 2026 explainer on shattered.io puts the split cleanly: a VPN and a private search engine solve different problems. Treating either as a substitute for the other is the most common mistake in a home privacy kit. One covers the network. The other covers what the search provider keeps about your queries. Neither finishes the other’s job.
What mainstream search actually logs
A default search engine typically keeps the query text, a timestamp, an approximate location derived from your IP, and — if you are signed into an account — a persistent identifier that ties that search to everything else linked to the same login, including queries from other devices. Even signed out, cookies and browser fingerprinting can re-identify an “anonymous” session across visits with uncomfortable accuracy. Screen size, fonts, canvas quirks, and a handful of dull technical facts are enough to stitch sessions together.
The bigger exposure is usually downstream of the search itself. Ad-tech pixels across the wider web let the same tracking infrastructure that logged your query also watch which sites you open afterward. “Searched for X” plus “later browsed Y and Z” is more revealing than either data point alone. Encrypting the connection to the search engine says nothing about what that engine does with the query once it arrives.
What a private search engine changes
Privacy-focused engines such as DuckDuckGo, Startpage, and Brave Search differ mainly in what they refuse to do, not in how results are generated. The usual commitments are no persistent logging of queries tied to an identifiable user, no ad-tracking cookies that follow you onto other sites, and results that are not personalized from a stored search history. That last point also means less of a filter bubble narrowing what you see over time.
The mechanisms are not identical. Startpage proxies Google’s index without passing identifying request data. DuckDuckGo mixes its own crawling with syndicated results. Brave Search leans on an independent index. The privacy goal is the same: stop the search provider from building a durable profile out of what you type.
What none of them change is your IP address. A private search engine can promise not to log your query against your identity, but the request still arrives from your real network unless something else handles that layer. That something else is a VPN. Combine the two and you get a query the provider does not retain, arriving from a connection it cannot easily map back to your home address. Use only one, and you have closed half the gap.
What neither one hides
Clicking a result still sends your connection — VPN-routed or not — to that destination site. The site can run its own trackers no matter how carefully the search itself was handled. A private search engine controls the search, not what happens after you leave it.
Browser fingerprinting sits mostly outside both layers. A distinctive mix of extensions, fonts, and screen configuration can re-identify a browser across sessions even with a clean IP and a no-log search provider. Any account you stay signed into during the session — email, shopping, a social tab left open — can still tie activity back to you through that login. Network encryption and query hygiene do not cancel a logged-in identity sitting in another tab.
A practical setup
Make a privacy-focused search engine your default, not a tool you remember only for sensitive queries. Habit beats willpower. Pair it with a VPN for the network layer. The two solve different problems, and neither substitutes for the other. For research you would rather not attach to your usual identity, open a fresh private window and stay signed out of personal accounts while you work.
Check your browser’s fingerprint occasionally. That layer is not covered by either tool above. And treat “private” as a specific, limited claim. Private search means no query logging at the provider. It does not mean full anonymity across every layer of the session.
None of this is about perfect invisibility, which is harder and more fragile than most people need. It is about knowing which tool addresses which layer, so a search engine’s privacy policy and a VPN’s no-logs claim are not quietly assumed to cover ground neither one actually does. Encrypt the pipe. Change who keeps the query. Then remember what still leaks after you click.
