Counts from signed-in users. People are counted, never named: each account is stored as a one-way code. Back to RIPA