[vintermann]

"Not knowing who a user is" privacy may still be useful even if you don't have, "not knowing two users are the same user" privacy.