Long-term statistics without individual query data

We have an (inofficial) long-term road map which already includes the idea of having different "privacy levels". Much of the code is already written but not yet tested, but will appear at some point for public testing.

The basic idea is to give users more fine grained settings for setting with how much detail they are comfortable. The currently defined levels are:

  1. Permit everything (no privacy filtering)
  2. Obfuscate domains names (replace domains by hidden, Top Domains and Top Ads not available)
  3. Obfuscate domains and clients (replace domains + clients by hidden + 0.0.0.0, all Top Lists unavailable)
  4. Maximum privacy (Top Lists, Query Log, and database aren't updated with any data)