Privacy-preserving data processing for content distribution

Abstract

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for distributing digital contents to client devices are described. For each of a plurality of client devices, the system receives a digital component request, identifies one or more user attributes of a user based on the digital component request, and sends the identified user attributes to the client device. The system obtains, from a shared storage of each client device, accumulated user attribute data and generates an aggregated user attribute report for a set of aggregation keys using the obtained accumulated user attribute data. The system distributes digital components to the client devices based on distribution parameters adjusted based on the aggregated user attribute report.