history rewrite for privacy