Search with a little more privacy.

Pass Search is a self-hosted SearXNG metasearch engine. We do not run ads, analytics, or user profiles. This page describes the limits as well as the protections.

Your searches

Search terms are sent from this server to the search engines needed to answer your request. Those engines see this server's IP address, not yours. They still receive the query itself: do not include sensitive personal information. Search forms use POST by default to keep terms out of the URL and ordinary browser history; GET searches are also supported.

Images, suggestions, and links

Result thumbnails are proxied through this server. Autocomplete and third-party favicon lookups are disabled by default. Following a result takes you to an independent website with its own privacy policy. Our pages send no referrer.

Cloudflare

This site uses Cloudflare Tunnel and Cloudflare's HTTPS edge. Cloudflare terminates HTTPS and can process your IP address, requests, and search terms. This is not an anonymity service or an end-to-end encrypted link directly to SearXNG. Cloudflare may keep security/operational data under its own policies. We have not enabled analytics here.

Storage and abuse prevention

Origin HTTP access logging and request-bearing proxy error logs are disabled. SearXNG retains aggregate engine timing and error statistics and temporary caches. Its abuse limiter uses short-lived IP-derived identifiers in an in-memory Valkey database; disk persistence is disabled. Runtime diagnostic logs can include engine errors. Preferences are stored in your browser when you choose to save them. Pages and search responses are marked no-store and noindex.

MCP clients

The authenticated MCP endpoint is intended for the instance owner's AI tools. Searches sent to public SearXNG instances are subject to those operators' policies and availability; public instance selection is not a privacy guarantee. Your AI provider also sees the queries and results you send to it.

Software

Powered by SearXNG (AGPL-3.0). The local stylesheet is served from this instance without external fonts or scripts.