interesting project for privacy-respecting aggregate statistics: https://github.com/divviup (based on a Stanford's "Prio" paper https://crypto.stanford.edu/prio/)