

That is factually incorrect.
Help page from Kagi (I’d understand if you don’t trust it), fit for non-techie consumption. https://help.kagi.com/kagi/privacy/how-does-privacy-pass-work.html
So here’s the RFC, which defined the protocol in the first place (Kagi didn’t invent it, just implements it) https://www.rfc-editor.org/info/rfc9576/
As such they have absolutely no way of ‘deciding’ to look up a searchers account based on the token used.
That ofcourse does not reduce other ways anyone can track you like fingerprinting.


Just tell the clanker to use modern practices poof fixed.
Jokes aside a lot of that bad code can be detected by static linting tools and gated on, making it impossible for any of those to reach main.