Aggregated satisfaction stays anonymous

User satisfaction signals appear in How Oernoe Search works under Privacy-Preserving Ranking Factors. The guide’s wording is careful on purpose: aggregated, anonymized signals about user satisfaction, with bounce rate and click-through rate named as examples, processed at scale without tying data to individuals. That sentence is easy to flatten into “they watch what you do.” Flattening is how a ranking note becomes an advertising scare. The published claim is narrower. Satisfaction signals, when used, are meant to stay aggregated and anonymous. They are not an advertising profile of you. They are not a side door for selling queries. Publisher ads on selected www.oernoe.com pages are a separate system with separate disclosures.

When you search, the algorithm analyzes the query, searches the index, evaluates pages with ranking factors, orders them, and returns results without attaching a personal advertising profile. The algorithm is supposed to work the same way for every person unless you saved custom preferences on purpose. Satisfaction signals sit, if at all, inside page evaluation as population-level feedback about how results and pages behave in aggregate. They do not authorize rebuilding a person-shaped file from your private clicks. If a bounce-rate style signal exists, the guide’s promise is that it is not tied to individuals. Editors should quote that promise and hold the product to it, not invent a warmer story about “learning from you.”

The factor list around satisfaction is the same family as content relevance, authority and expertise, link analysis, page freshness, mobile-friendliness, and page speed. Notice what is not on the list: your search history, your location, your device type, your age, your interests, or any other personal data used as a ranking profile. Quality and relevance of content remain the point. A page that people leave immediately in aggregate may lose ground relative to a page that answers the query. That comparison is still about documents as experienced at scale. It is not a license to attach your name, account, or query string to a satisfaction row and hand it to an advertiser.

People hear “click-through” and “bounce” and picture a dashboard with their face on it. That picture comes from advertising analytics culture, not from the ranking paragraph Oernoe publishes. Advertising dashboards often exist to optimize spend against known or guessed audiences. Search ranking, on the published design, is optimizing document order for a query without building an advertising profile from search history. Same English words can name different systems. Confusing them is how you get a homepage sentence that overclaims privacy while a publisher page loads AdSense. Search-and-ads exists so that mash stops. Aggregated satisfaction inside Search ranking is not Google’s measurement of an ad unit on a guide. Those are different pipes.

Your privacy during search has its own chapter and must stay true alongside ranking. Communication uses HTTPS so an ISP or network observer cannot intercept the query in transit. Search does not create a profile of your interests based on searches. Each search is processed independently with no connection to previous searches as an advertising profile. Queries are not used to build an advertising profile. Technical and security logs needed to run Search may exist as described in the Privacy Policy; those logs are not a license to sell query history to advertisers. Oernoe Search does not use click or dwell signals to build an advertising profile of you. Read that again next to the satisfaction sentence. Aggregate anonymized ranking feedback is not the same claim as “we build a behavioral advertising file from your clicks.” If engineering ever collapses those claims, it is a bug and a corrections job, not a branding opportunity.

Publisher ads are the other system people mash into this topic. Selected finished pages on www.oernoe.com may load Google AdSense. How-To, finished guides including How Search works and Search queries and Google ads, Using an account, What we publish, hostname guides, Corrections, privacy-request guides, and substantial journal articles that pass originality and length checks are in the eligible set described in Cookies and Search-and-ads. Ads stay off Home, About, Team, Contact, editorial standards, the guides index, legal pages, login, signup, password reset, the journal listing, error pages, and the apps themselves: Search, Health, Chat, AI, Docs, Drive, and Tracker. Ads are requested as non-personalized by default. Google may still process page context, cookies or similar identifiers, IP address, browser and device data, and ad interaction data under its own policies. That processing is not Search attaching satisfaction rows to you. Search queries typed at search.oernoe.com are not an input to those units.

The Cookie Policy and Privacy Policy say the same split in legal clothes. Oernoe does not sell account information or search history. Oernoe does not use search history to create advertising profiles. Oernoe does not provide account or search data to advertisers for their own direct marketing. Google acts under its own terms when it processes advertising data. Oernoe does not receive a copy of a visitor’s complete browsing history from Google. Ads Settings, Network Advertising Initiative opt-outs, and Digital Advertising Alliance opt-outs are the controls for advertising choices. The cookie bar on www is a notice, not a consent management platform and not a fake consent wall. Dismissing it with OK only hides the bar. None of that paragraph turns aggregated ranking satisfaction into an ad graph.

Personalization without tracking remains explicit when you are logged in. Save searches, bookmark sources, set language and region, create filters. You decide. The product does not automatically learn interests into a detailed advertising profile. Saved preferences are not shared with advertisers. You can delete them. Those preferences can change what you see because you asked for settings, not because an anonymized satisfaction aggregate was reattached to your account as a secret score. If two people save different region filters, their results can differ for that reason. That is not the same as building a satisfaction dossier per person.

How Search compares with other engines is also where satisfaction language gets oversold. Search is a working engine at search.oernoe.com. It is not a claim that the index matches every other engine in size. The difference we will stand behind is narrower: Search does not use personal advertising profiles to rank results, and this publisher site discloses Google ads when they appear. Funding includes optional premium features and contextual Google ads on selected publisher pages. Search queries are not sold. Clicking through to a website from results uses a generic referrer that does not reveal the query. That stripping protects the query from the destination site. It is not a claim that no aggregate ranking statistics ever exist inside Search. It is also not a claim that those statistics are sold.

From the editor’s side, the risk is writing satisfaction as if it were intimacy. Soft copy that says “we learn what you love” would contradict anonymization. Soft copy that says “your clicks train ads” would contradict Search-and-ads. Soft copy that says the whole network has no third parties would contradict AdSense on eligible pages. The correct voice is plainer: ranking may use aggregated anonymized satisfaction; it must not tie that data to individuals; it must not become an advertising profile; publisher ads are disclosed elsewhere and stay separate; technical logs for abuse and uptime are not an ad graph. Related essays already cover technical logs, pages versus people, no sale of account or search data, and click-through referrer stripping. This essay stays on the anonymity claim for satisfaction signals and the boundary with publisher advertising.

Crawling still matters as context. Crawlers index public pages, respect robots.txt and rate limits, and do not harvest people into advertising lists during the crawl. Satisfaction signals are not crawl harvests of identities. They are, if used, post-result population feedback about how pages perform for queries in aggregate. Continuous crawling keeps documents available to be ranked; anonymized satisfaction, if present, is about how those documents fare after they are shown. Mixing crawl privacy with satisfaction anonymity is optional rhetoric. Keeping both claims checkable is mandatory.

Listings people submit for people and companies go through an approval step you can see in the product. That index is public web plus chosen listings. It is not a back door into Health notes, Chat threads, Drive files, or account settings. Satisfaction around a listing page would still have to obey the anonymization rule if such a signal is used at all. Approval and careful removal of wrong rows are product facts about the public index, not about building private satisfaction biographies.

Common questions arrive as if anonymity were a slogan. Can you reverse an aggregate and find me? The published design says processing without tying data to individuals; if that fails, it is a defect to correct, not a feature to market. Does bounce rate mean you sold my session? No. Sale of account or search data is refused; publisher ads are a different pipe with their own measurement under Google. Does click-through rate mean the destination site learns my query? No; referrer stripping is the published behavior for click-through from results. Does reading this essay on www feed Search a satisfaction profile of me? No. Hostname jobs stay separate. www publishes; search ranks. An essay here is not a Search session.

Operators and editors also have a practical check that does not require inventing statistics. Open How Search works and confirm the satisfaction line still says aggregated and anonymized without tying data to individuals. Open Search-and-ads and confirm Search still refuses advertising profiles from queries while www still discloses AdSense on eligible pages. Open Privacy section 4 and Cookies and confirm non-personalized defaults, Google’s possible processing, and the notice-not-consent bar. If any of those pages drift, this essay is wrong the same day and should be corrected, not defended with warmer adjectives.

If you are a reviewer or a careful reader, check the sentences against the live guides. How Search works names aggregated anonymized satisfaction and names what is not on the ranking list. Search-and-ads names the Search promise and the publisher AdSense split. Privacy and Cookies name non-personalized defaults, Google’s possible processing, and the notice-not-consent cookie bar. About names the operator Anoepal, the founder Angel Mejia Rodriguez, live services on the homepage directory, and the refusal to sell account or search data. What we publish names originality and length floors for journal pieces and refuses thin promotional stubs. Those pages are the ground. This essay is commentary that must not outrun them.

Aggregated satisfaction stays anonymous because the ranking guide says the signals are processed at scale without tying data to individuals, because Search refuses to use click or dwell signals to build an advertising profile of you, because queries are not sold as an advertising file, and because publisher ads on eligible www pages are a disclosed separate system. Technical logs for security are not that system either. Saved preferences are explicit and deletable. Freshness, authority, and relevance remain document-side factors. Keep those sentences apart and “bounce rate” stops sounding like a file with your name on it. That is the editorial job: protect the anonymity claim with plain boundaries, refuse the mash with ads copy, and leave intimacy metaphors outside the ranking story.