Blind Targeting: Personalization under Third-Party Privacy Constraints