Bücher — local differential privacy