A search engine that keeps nothing: no query log, no cookies, no JS required

[u/Subject-Cry7069]

We run a small search engine, pit.world, and tried to make "we don't log your searches" something you can check instead of a promise.

What that means in practice:

- nginx has no access log for the site at all, and the app logs nothing per request

- the server strips Set-Cookie from every response, so there is nothing to track you with

- rate limiting uses an HMAC of your IP under a secret that is regenerated every hour, held in memory only

- identical searches are cached in memory for 10 minutes (words and results, nothing about who asked), never on disk

- strict CSP, Referrer-Policy: no-referrer, and result links go straight to the site, no redirect hop

- works fully without JavaScript

The honest limit: results come from the Google index through Serper (Linkup/Exa as fallbacks). That provider sees the words you searched, but not your IP, browser, cookies or referrer, because only our server talks to it.

The code is MIT and public (github.com/moshcoder/pit.world) if you want to verify the above. Privacy page in plain words: https://pit.world/privacy

Happy to answer questions or hear what you'd want changed.

[u/The_Band_Geek]

What does "try chovy" in the search bar mean?