Privacy preserving frequency capping in internet banner advertising