Abstract: Methods and systems for anonymizing data are disclosed. A proxy server receives a request directed to a web server coupled to the proxy server from a user device. The request includes one or more items of personally identifiable information (PII) associated with a user account. The proxy server assigns one or more tokens to the one or more items of PII. The proxy server processes the request, replacing the one or more items of PII in the request with one or more anonymized strings. The one or more anonymized strings include the one or more tokens. The proxy server stores the one or more items of PII in association with the one or more tokens in a database for the proxy server. The proxy server forwards the processed request including the one or more anonymized strings to the web server.