Anonymity or authentication? Enabling hybrid services that are personalised but private