A framework associated with an online store is configured to enable privacy preserving data sharing for invitational campaigns by limiting the amount of data that is shared to a content delivery network for the campaign until a sufficient number of interactions have occurred to provide crowd anonymity to participants in the campaign.