Abstract: Techniques are provided for anonymizing statistical reports to protect user privacy. In one embodiment, a first request to view an aggregated statistic pertaining to online behavior of multiple users is received. In response to receiving the first request, a plurality of attributes associated with the first request is determined; a function is applied that accepts a seed value and the plurality of attributes to generate a number; a particular noise factor is determined based on the number and a distribution of noise factors; a true value for the aggregated statistic is determined; a noisy value that is different than the true value is determined based on the true value and the particular noise factor; and the noisy value is presented in response to the first request instead of the true value.