Libros — local differential privacy