hide sale id so users can't guess someone else's