Don’t Be Creepy: Using Robust User Data for Ad Targeting While Respecting Privacy