This document describes a proposed system for privacy-preserving personalized web search. It discusses hardware and software specifications, existing systems that have privacy and personalization issues, and the proposed system which formulates the problem as risk profile generalization. The proposed system includes two algorithms, GreedyDP and GreedyIL, to support runtime profiling while maximizing privacy protections. It also describes modules for the system, including image loading, adjustment tools, filtering, pruning, resizing, and system flow.