Ah, so if I have a few thousand users using tokens that are only reedemable at my service, I still can't tell which users are spending which tokens. Is that correct?