Threat models: when Uruky is not enough - Uruky

Skip to main content

Documentation

Threat models: when Uruky is not enough

Understand what Uruky can and cannot protect against, and what to use instead when you need stronger anonymity.

Uruky is built for privacy through incentives — user-funded, ad-free, minimal data — but might not be the best choice for maximum anonymity against a motivated adversary. Choosing the right tool depends on your threat model. This page is for when hiding your IP or device, or avoiding any long-lived identity, matters more than ad-free personalization.

When Uruky is a good fit

You want ad-free search without surveillance-capitalism incentives.

You want control over the search results and experience, with EU-based operation.

You accept trust in Uruky and upstream providers, not mathematical proof.

What no search service can prove

These limits apply to any search engine or provider, not only Uruky:

It is impossible to prove that searches are never logged — by Uruky or by any upstream provider.

It is impossible to prove that your IP is never tracked. At minimum, the service operator sees connection metadata.

It is impossible to prove that no profile is built over time while an account exists. Queries, settings, and usage patterns can be linked to that account.

Kagi Privacy Pass<br>is one example of a technical approach that, in theory, could let a provider serve searches without building a query profile when it is in use. Even then, Kagi still ties payment and personal data (email, etc.) to the account; Privacy Pass addresses search profiling, not account identity. Uruky does not implement Privacy Pass, yet..

It is impossible to prove that production servers run a specific source code snapshot.

Uruky gives paying customers a copy of the source code after 12 months, which increases transparency and auditability, but that still does not mathematically prove what runs in production today. See<br>Source code

How Uruky handles your traffic

Your browser connects to Uruky. Upstream search providers see Uruky's infrastructure, not your device IP. That helps with provider-side IP tracking, but Uruky still receives your IP (for rate limits, abuse prevention, and similar — see the FAQ).

Queries still leave Uruky toward third-party indexes and APIs. You inherit provider trust too, see<br>Search engine providers

Stronger threats: IP, device, and fingerprinting

If your goal is that no one can associate searches with your network or device,<br>Tor<br>or a trusted VPN is the baseline, not Uruky alone.

Mullvad<br>is one example of a VPN provider often considered trustworthy for privacy; whether a provider is "trusted" is ultimately your judgment call.

VPNs and Tor address IP visibility. Browser fingerprinting can still identify a device or session independently of your IP. That is worth knowing, not panicking over.

Avoiding profiling and payment trails

If you want to stay on Uruky but reduce long-lived identity linkage:

Use vouchers, cash-by-mail, or crypto where available — see<br>Cash payment<br>or voucher resellers in the FAQ.

Rotate to a new account number periodically (for example, every month) so activity is not tied to one long-lived identity.

If you need to avoid the account model entirely, Tor plus a free search engine that needs no account is a common choice, for example<br>Mojeek,<br>Ecosia,<br>Qwant,<br>PriEco,<br>DuckDuckGo, or<br>StartPage. That path does not fight the ad-funded business model, but when anonymity is your main concern, that trade-off can be rational.

On payment trails: Mollie and card payments do not permanently link billing identity to your Uruky account. Uruky stores a payment reference in its own database for up to 14 days (duplicate-payment prevention); after that it is gone. Mollie never knows which Uruky account a payment was for.

For threat models where even a short-lived or processor-side billing trail matters, cash-by-mail, vouchers, or crypto remain the stronger options — together with account rotation as above.

Pick the right tool

Uruky versus Tor plus a free engine is not a moral hierarchy, it's a threat-model choice. For what Uruky commits to collecting and how we operate, see the<br>Privacy Policy<br>and the<br>FAQ

Related

Privacy Policy

Search engine providers

Cash payment

Source code