Privacy-first tokens