Yes, the search engine they use (Gigablast) is the one decrypting. From the private.sh main page: > Every single search request from our website and extension

Yes, the search engine they use (Gigablast) is the one decrypting. From the private.sh main page: > Every single search request from our website and extension is encrypted locally on the client and proxied through our service, stripping away your public IP address ensuring that only the search provider is able to decrypt and see your query without any knowledge of who you are. > The results are returned to you through our proxy and are rendered locally on your machine only using javascript running on your machine. I haven't used it, so I don't know what their results are like, but you seem to be mistaken about the privacy.