Books — local differential privacy