We use a variant of privacy pass (Chaum blind signatures): https://github.com/brave-intl/challenge-bypass-ristretto https://github.com/brave-intl/challenge-byp

We use a variant of privacy pass (Chaum blind signatures): https://github.com/brave-intl/challenge-bypass-ristretto https://github.com/brave-intl/challenge-bypass-ristretto The key is no user identifiable events and no ability to link events for a given user together. Advertisers want authentic aggregate results — they don’t want (at first or in bulk, also not legal in many places) user ids. We built an authentic but anonymous ad system.