RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response

   Abstract