Token-Level Privacy in Large Language Models