Anonymizing analytics to protect user privacy