Perturb-and-Project: Differentially Private Similarities and Marginals