Private.sh

Private.sh uses an approach similar to TOR. Your query is encrypted using javascript before it leaves your computer. Only able to be decrypted by the search engine itself. However, it is first routed through a separately-managed proxy that strips your IP address. Therefore, no single entity has BOTH your IP address and your query. As far as we know, Private.sh is the only private search that has this level of privacy.