Honest question, but is there something specific you're concerned about? Do you expect Google spies on Containers running on their servers, such as decoding RAM or decoding Network Traffic (that isn't ssl encrypted, at least)?
I get the paranoia, but honestly i'm more paranoid of Kagi themselves than i am of processes running on AWS or GCP.
The percentage of the internet you'd be unable to use if you couldn't use any cloud provider for fears of 5 Eyes-like monitoring is kinda intense for me. So i'm not sure where realistic and excessive paranoia meet with respect to AWS or GCP infra.
It's not very hard to spy inside a container, or even a bare-metal server if you have hardware access and the network is yours, but why would they even do that when there are a lot of very easy methods of profiling users available to them?
I didn't mention but they also use search results from google.
1) A direct contract with Kagi: Pay less for our services in exchange for user's data ("anonymized"). And google has a lot of services that Kagi may benefit greatly: servers, low latency to google search results, "personalized" google search results without ads and the various sheganigans google uses to promote websites, up to the point where all searches actually comes directly from google.
2) No contract, just get my IP and the search string the Kagi server asks of google at the same time. I don't think there are enough simultaneous searches on Kagi to actually prevent IP-to-search-string pairing. Then do the google-ad-to-IP match on the target sites that I visit.
> but why would they even do that when there are a lot of very easy methods of profiling users available to them?
That's fair, but the GCP was mostly what i was relying to.
Fundamentally do you dislike Kagi's offering more than Mulvad (https://news.ycombinator.com/item?id=36402162) on the privacy front? Clearly the two companies have different goals, so i'm not trying to equate them. Just curious.
Also what search engine _do_ you use then? I feel like all of them would be disqualified?
"Next, your request will find its way to our servers hosted on Google Cloud platform, where our main application is running [...]"
I stopped there. I'm not going to subscribe. But I appreciate that at least they were honest.