Is hosting not being considered at all? Although I realise it would require a serious amount of resources (time, money, and energy), would that not be the best way to ensure that the privacy policy is met to the fullest extent? Also, not having to rely on external hosts would be better for DDG in the long run, in case one of those hosts changes/decides to stop. If DDG were to become a huge, Google-like corporation (as we all hope it will, except without the whole "evil" thing going on), then partnering would be obsolete, and the shift would have to be made in any case.