You can't count on a browser session to be particularly short-lived. Even if you don't tie query logs directly to a username, the mere act of correlating different queries from a user inherently compromises privacy, as demonstrated by the AOL leak.