Private analytics

Counts are differentially-private estimates, not exact tallies. Each visitor's yes/no bit is randomized in their browser (epsilon = 1.099, so a report is truthful 75.0% of the time) and totals are de-biased here. Rows with under 100 reports are noisy and shown with a ~. This is local differential privacy — the server learns totals and nothing about any individual. It isnot a zero-knowledge proof and does not anonymize the network connection.