Personalized Privacy-Preserving Data Aggregation for Histogram Estimation
RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response