Question to the HN crowd : Would having event data & PII-ish data decoupled be an acceptable compromise to privacy granted that you can wipe the PII stuff and the only data left is completely anonymous (just a UUID that leads to nothing in case of deletion)?
Is anonymity in the eye of the beholder?