Zero-peeking privacy