Making It Personal: How To Profit From Personalization Without Invading Privacy