Privacy-preserving statistical analytics