Scalable contribution bounding to achieve privacy