A new encryption system makes it possible to collect aggregate statistics about things people do, but impossible to identify the statistics with individuals.