The subject system may be implemented by at least one processor configured to, by a system process, receive a request for one or more content item bundles, obtain the one or more content item bundles for presentation of the one or more content item bundles, receive a selection of a content item bundle from the presented one or more content item bundles, and providing, to the application process, one or more content items of the selected content item bundle. The one or more content item bundles are inaccessible to an application process before they are provided to the application process by the system process.