> The amount of information revealed from each query is calculated and deducted from an overall privacy budget to halt additional queries

this is why DP doesn't get used in any real system -- limited # of searches is a deal breaker for any service that wants to monetize

there are some applications where this could be okay, like in-company surveys where you want to enable employees to run stats queries without revealing individuals, but companies are (relatively) high trust environments and DP is overkill