> The privacy aspect of DDG was always their marketing point, and I think we all knew it couldn't be totally true. Surely they must be harvesting data of some type, or else how would they expect to earn revenue?

Simple. They can run display ads instead of targeted ads.

Since they have the search term you just typed, they know exactly what you’re looking for at this moment, and can target with that.