idea about anonimyzing tracking - maybe work with single-use disposable hashes that are part of a memory-less system that tracks site-visits ?

it would register access to the website, add an interaction token to the pay-to database and forget who it was that visited.

if you keep to an honorable "do no evil" philosophy, this should work.

i'm sure the temptation to use a large database of collected visit data to optimize ads is appealing from a financial point of view, but since your product is about avoiding tracking, it should fit and keep it popular enough to remain sustainable.