Google Search MetaGer is a German metasearch engine operated by SUMA-EV (Verein für freien Wissenszugang — Association for Free Access to Knowledge), a registered non-profit association based in Hannover, Germany. Founded in 1996 as a research project at the University of Hannover by Dr.-Ing. Wolfgang Sander-Beuermann, MetaGer is one of the oldest privacy-focused search engines in existence. It queries up to 50 search engines simultaneously and merges results using composite scoring.
In September 2024, Yahoo unilaterally terminated its advertising contract with MetaGer without notice, eliminating the ad-supported free tier that had sustained the service. This forced SUMA-EV to dismiss all paid employees and shut down large servers. Daily queries dropped from approximately 300,000 to around 10,000 immediately after. MetaGer transitioned to a token-based paid model: 1,000 tokens cost €10, with one web search costing approximately 3 tokens. The token system uses blind signing cryptography — anonymous tokens are generated so MetaGer cannot link searches to specific user keys. Tokens can even be purchased by physical letter for zero digital payment traces.
All MetaGer servers are located exclusively in Germany, hosted on Hetzner Online GmbH hardware, and powered by 100% renewable energy. The service falls under German data protection law and GDPR. IP addresses are stored for a maximum of 96 hours for rate-limiting purposes, then automatically deleted. Search queries are not permanently saved or shared.
Key Features
- Non-Profit Operated: Run by SUMA-EV, a German non-profit association recognized by the Hanover North Tax Office
- Anonymous Proxy: “Open Anonymously” feature routes browsing through MetaGer’s proxy server
- 96-Hour Data Deletion: IP addresses automatically erased after 96 hours; search queries not permanently stored
- Tor Hidden Service: Full access via the Tor network for maximum anonymity
- Blind-Signed Tokens: Cryptographic privacy system preventing search-to-user linking even in paid model
- Maps.MetaGer.de: Privacy-respecting map service that does not log or monitor user locations
- 100% Renewable Energy: All infrastructure powered by green energy via Hetzner
Privacy Highlights
MetaGer’s privacy architecture centers on data minimization and transparency. IP addresses are stored with a timestamp for a maximum of 96 hours solely to rate-limit searches per connection, then automatically deleted. Search queries are not permanently saved or shared. Location data is not saved or shared. The service offers anonymous proxy access and a Tor hidden service for users seeking maximum anonymity.
The token-based payment system implements blind signing — a cryptographic method ensuring that neither the user’s key nor any regular token is ever sent with a search. Instead, an anonymous token is created that MetaGer can validate without knowing which key generated it. This design ensures that even the paid model preserves user anonymity.
The source code is fully open source under AGPL-3.0, published on MetaGer’s self-hosted GitLab at gitlab.metager.de. All servers are located in Germany, falling exclusively under German data protection law — among the strictest in the world.
Privacy Breakdown
Data Residency (Score: 95 — Confidence: High)
Pros:
- All servers located exclusively in Germany, hosted on Hetzner Online GmbH hardware.
- Subject to German data protection law (BDSG) and GDPR — among the strictest privacy jurisdictions globally.
- Non-profit operator (SUMA-EV) with no commercial incentive to monetize user data.
- 100% renewable energy infrastructure.
Cons:
- Search queries are forwarded to upstream search engines (Bing, Mojeek, Brave Search), though anonymized before transmission.
- Historical use of Microsoft Clarity and Microsoft Advertising (now terminated with Yahoo contract end in September 2024).
Open Source (Score: 85 — Confidence: High)
Pros:
- Fully open source under AGPL-3.0. Source code published at gitlab.metager.de/open-source/MetaGer.
- First published August 16, 2016. Related repositories include KeyManager and English app.
- AGPL license ensures any network-deployed modifications must be shared.
Cons:
- Smaller contributor base compared to projects like SearXNG.
- No publicly documented independent security audit.
- Self-hosted GitLab instance (not on a major platform like GitHub), reducing discoverability.
Privacy Policy (Score: 82 — Confidence: High)
Pros:
- Last updated March 25, 2025. Clear retention periods documented.
- 96-hour maximum retention for IP addresses. Search queries not permanently stored.
- No automated decision-making or profiling. No third-party data sharing (post-Yahoo partnership).
- GDPR rights (access, correction, deletion) fully supported.
Cons:
- Historical Microsoft Clarity integration raised GDPR concerns (now discontinued).
- Privacy policy previously incomplete regarding Microsoft/Yahoo advertising data flows.
- No legal entity beyond a non-profit association — limited enforcement resources.
Trackers (Score: 88 — Confidence: High)
Pros:
- With the end of the Yahoo/Microsoft advertising partnership, third-party tracking has been substantially reduced.
- Token-based system uses blind signing cryptography for anonymous payments.
- Anonymous proxy and Tor hidden service available for maximum privacy.
Cons:
- Historical use of Microsoft Clarity (an independent data controller) on results pages — now discontinued.
- Search queries forwarded to upstream engines, though anonymized.
- Deductions for historical tracking practices, even though now resolved.
Terms of Service (Score: 80 — Confidence: High)
Pros:
- User logs deleted after finite period. Personal data used for limited purposes only.
- Privacy-friendly jurisdiction. No third-party sharing. Open-source code.
- Tor onion site access. Free help desk support.
Cons:
- Terms may be changed without notice in ways that negatively affect user rights.
- Service reserves the right to refuse/reject user communications.
Controversies
The most significant event in MetaGer’s recent history was Yahoo’s unilateral contract termination on September 9, 2024. Yahoo terminated all contracts without notice, stating they would no longer operate the business in Germany. This forced SUMA-EV to dismiss all paid employees and shut down large servers. Daily queries dropped from approximately 300,000 to 10,000 immediately after. [1]
The transition from free to paid-only service has been criticized as limiting accessibility, though the privacy community acknowledges the forced nature of this change. MetaGer’s plans to build an independent European search index through the Open Search Foundation were effectively ended by the Yahoo termination. [2]
Previously, MetaGer used Microsoft Clarity and Microsoft Advertising on results pages to deliver Yahoo search results and ads. Microsoft Clarity acts as an independent data controller rather than a processor, raising GDPR concerns. This integration ended with the Yahoo contract termination. [3]
