Google Search Startpage is a Dutch search engine founded in 1998 as Ixquick by David Bodnick and Robert E.G. Beens. Headquartered in The Hague, Netherlands, it operates under Dutch jurisdiction and EU privacy law. Startpage delivers Google search results through a server-side proxy that strips all identifying information before forwarding queries — Google sees Startpage’s servers, not individual users. The company generates revenue through contextual advertising based solely on the current search query, without user profiles or browsing history.
In late 2018, Privacy One Group — a subsidiary of System1, an American ad-tech company — acquired a majority stake in Startpage through Surfboard Holding BV. This ownership change was not publicly disclosed until October 2019, prompting Privacy Guides (formerly PrivacyTools) to delist Startpage due to unanswered questions about the acquisition. Startpage’s founders maintain they retain control over all privacy implementations and can unilaterally reject any technical change that could affect user privacy. The search engine remains headquartered in the Netherlands and subject to EU law.
Startpage received the European Privacy Seal (EuroPriSe) certification in 2008 (as Ixquick), with re-certifications in 2011, 2013, and 2015. The service claims to store no IP addresses, no search queries, and no user profiles. It uses no tracking cookies — only an anonymous preferences cookie that expires after 90 days with no unique identifiers.
Key Features
- Google Results Without Tracking: Full Google search results delivered through a privacy-preserving proxy
- Anonymous View: Browse search result pages through Startpage’s proxy, hiding your IP from destination sites
- No Registration Required: Full functionality without any account or personal information
- Contextual Advertising: Ads based only on the current search query, not user profiles
- European Jurisdiction: Dutch company subject to GDPR and EU privacy law
- EuroPriSe Certified: European Privacy Seal certification (2008–2015)
Privacy Highlights
Startpage’s privacy architecture is based on server-side proxying. When a user submits a search query, Startpage forwards it to Google after stripping all identifying information — IP addresses, cookies, and browser fingerprints. Google sees only Startpage’s servers, not individual users. Results are returned and tracking elements are removed before display. The Anonymous View feature extends this protection to result pages, allowing users to browse destination websites through Startpage’s proxy.
The privacy policy states that no IP addresses are recorded (since January 2009), no search history is stored, no user profiles are created, and no tracking cookies are used. HSTS is enforced for all connections. Developer tools analysis confirms no client-side requests to Google — queries are handled entirely server-side.
However, the service is entirely closed source, preventing independent verification of these claims. Ad clicks route through Google’s servers, which may still log some information. The System1 ownership creates a perceived conflict of interest, as System1 specializes in keyword pay-per-click advertising.
Privacy Breakdown
Data Residency (Score: 78 — Confidence: Medium)
Pros:
- Headquartered in The Hague, Netherlands. Subject to Dutch law and GDPR.
- Claims zero retention of personal data — no IP addresses, no search queries stored.
- European Privacy Seal (EuroPriSe) certified from 2008 to 2015.
Cons:
- Search queries proxied to Google (US), creating a dependency on US infrastructure.
- Ad clicks pass through Google’s servers, which may log some information.
- Majority owned by System1 (US ad-tech company) through Privacy One Group since December 2018.
Open Source (Score: 10 — Confidence: High)
Pros:
- Startpage Privacy Protection browser extension is publicly available.
Cons:
- Core search engine is entirely proprietary and closed source.
- No public code repository. No way to independently verify privacy claims through code inspection.
- Users must trust Startpage’s claims without the ability to audit the code.
Privacy Policy (Score: 78 — Confidence: Medium)
Pros:
- Clear no-logs policy: no IP addresses, no search queries, no user profiles stored.
- EuroPriSe certification confirmed compliance through technical and design audits (last certified 2015).
- GDPR compliant. Privacy-friendly jurisdiction (Netherlands/EU).
Cons:
- System1 ownership since December 2018, disclosed nine months after acquisition.
- No recent third-party privacy audit publicly documented (last EuroPriSe in 2015).
- Closed source prevents independent verification of privacy claims.
Trackers (Score: 88 — Confidence: Medium)
Pros:
- No tracking cookies. Only anonymous preferences cookie (expires 90 days, no unique identifiers).
- No analytics trackers on the search page.
- Server-side proxy prevents Google from identifying individual users.
Cons:
- Ad clicks route through Google’s servers, which may still log information.
- Closed source prevents full verification of what data flows occur.
- System1 ownership adds uncertainty about future tracking practices.
Terms of Service (Score: 90 — Confidence: High)
Pros:
- Does not track users. Will resist legal requests where reasonably possible.
- IP addresses not tracked. Cookies do not contain PII. Does not sell personal data.
Cons:
- Only aggregate data given to third parties (neutral point).
- Court jurisdiction specified (neutral point).
Controversies
The most significant controversy surrounds the System1 acquisition. In late 2018, Privacy One Group (a Delaware-registered subsidiary of System1, a US ad-tech company) acquired a majority stake in Startpage. The ownership change was not publicly disclosed until October 2019. Privacy Guides delisted Startpage in November 2019, stating they had no evidence of privacy violations but could no longer recommend the service with confidence. [1] At least one employee resigned in protest after the acquisition was disclosed. [2]
CEO Robert Beens declined to state the exact percentage of shares held by System1. Startpage responded that founders retain control over privacy implementations and can unilaterally reject technical changes that could affect user privacy. [3] System1 is described as interested in Startpage’s ad revenue, not its data.
HowStuffWorks, also owned by System1, publishes content about Startpage, raising editorial independence questions. [4]
