Not so plain. We do not (log AND associate), or we do not log AND we don’t associate? Am I supposed to believe that if their backend crashes after a user query, that can’t tell what has been queried?
And here lies the problem - there’s a difference between “we have no process that associates queries and users” and “the system is specifically designed to make this association impossible”.