{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,10]],"date-time":"2026-01-10T02:05:57Z","timestamp":1768010757364,"version":"3.49.0"},"reference-count":64,"publisher":"MDPI AG","issue":"10","license":[{"start":{"date-parts":[[2020,10,20]],"date-time":"2020-10-20T00:00:00Z","timestamp":1603152000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001659","name":"Deutsche Forschungsgemeinschaft","doi-asserted-by":"publisher","award":["SPP1894"],"award-info":[{"award-number":["SPP1894"]}],"id":[{"id":"10.13039\/501100001659","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IJGI"],"abstract":"<jats:p>Through volunteering data, people can help assess information on various aspects of their surrounding environment. Particularly in natural resource management, Volunteered Geographic Information (VGI) is increasingly recognized as a significant resource, for example, supporting visitation pattern analysis to evaluate collective values and improve natural well-being. In recent years, however, user privacy has become an increasingly important consideration. Potential conflicts often emerge from the fact that VGI can be re-used in contexts not originally considered by volunteers. Addressing these privacy conflicts is particularly problematic in natural resource management, where visualizations are often explorative, with multifaceted and sometimes initially unknown sets of analysis outcomes. In this paper, we present an integrated and component-based approach to privacy-aware visualization of VGI, specifically suited for application to natural resource management. As a key component, HyperLogLog (HLL)\u2014a data abstraction format\u2014is used to allow estimation of results, instead of more accurate measurements. While HLL alone cannot preserve privacy, it can be combined with existing approaches to improve privacy while, at the same time, maintaining some flexibility of analysis. Together, these components make it possible to gradually reduce privacy risks for volunteers at various steps of the analytical process. A specific use case demonstration is provided, based on a global, publicly-available dataset that contains 100 million photos shared by 581,099 users under Creative Commons licenses. Both the data processing pipeline and resulting dataset are made available, allowing transparent benchmarking of the privacy\u2013utility tradeoffs.<\/jats:p>","DOI":"10.3390\/ijgi9100607","type":"journal-article","created":{"date-parts":[[2020,10,20]],"date-time":"2020-10-20T09:28:23Z","timestamp":1603186103000},"page":"607","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["Privacy-Aware Visualization of Volunteered Geographic Information (VGI) to Analyze Spatial Activity: A Benchmark Implementation"],"prefix":"10.3390","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1157-7967","authenticated-orcid":false,"given":"Alexander","family":"Dunkel","sequence":"first","affiliation":[{"name":"Institute of Cartography, TU Dresden, 01069 Dresden, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6751-5496","authenticated-orcid":false,"given":"Marc","family":"L\u00f6chner","sequence":"additional","affiliation":[{"name":"Institute of Cartography, TU Dresden, 01069 Dresden, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2949-4887","authenticated-orcid":false,"given":"Dirk","family":"Burghardt","sequence":"additional","affiliation":[{"name":"Institute of Cartography, TU Dresden, 01069 Dresden, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2020,10,20]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"See, L., Mooney, P., Foody, G., Bastin, L., Comber, A., Estima, J., and Rutzinger, M. (2016). Crowdsourcing, citizen science or volunteered geographic information? The current state of crowdsourced geographic information. ISPRS Int. J. Geo Inf., 5.","DOI":"10.3390\/ijgi5050055"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Sui, D.Z., Elwood, S., and Goodchild, M.F. (2013). To Volunteer or to contribute locational information? Towards truth in labeling for crowdsourced geographic information. Crowdsourcing Geographic Knowledge: Volunteered Geographic Information (VGI) in Theory and Practice, Springer.","DOI":"10.1007\/978-94-007-4587-2"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"36","DOI":"10.1016\/j.gloenvcha.2019.02.003","article-title":"Passive crowdsourcing of social media in environmental research: A systematic map","volume":"55","author":"Ghermandi","year":"2019","journal-title":"Glob. Environ. Chang."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"336","DOI":"10.1287\/isre.1040.0032","article-title":"Internet users\u2019 information privacy concerns (IUIPC): The construct, the scale, and a causal model","volume":"15","author":"Malhotra","year":"2004","journal-title":"Inf. Syst. Res."},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Lane, J., Stodden, V., Bender, S., and Nissenbaum, H. (2015). Privacy, Big Data, and the Public Good: Frameworks for Engagement, Cambridge University Press.","DOI":"10.1017\/CBO9781107590205"},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"205395171665021","DOI":"10.1177\/2053951716650211","article-title":"Where are human subjects in Big Data research? The emerging ethics divide","volume":"3","author":"Metcalf","year":"2016","journal-title":"Big Data Soc."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"260","DOI":"10.1016\/j.ecocom.2009.10.006","article-title":"Challenges in integrating the concept of ecosystem services and values in landscape planning, management and decision making","volume":"7","author":"Alkemade","year":"2010","journal-title":"Ecol. Complex."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1093\/idpl\/ipr018","article-title":"The problem of \u201cpersonal data\u201d in cloud computing: What Information is regulated?\u2014The cloud of unknowing","volume":"1","author":"Hon","year":"2011","journal-title":"Int. Data Priv. Law"},{"key":"ref_9","first-page":"591","article-title":"Real-Time and Spatio-Temporal Crowd-Sourced Social Network Data Publishing with Differential Privacy","volume":"15","author":"Wang","year":"2018","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_10","first-page":"263","article-title":"A survey on context-aware systems","volume":"2","author":"Dustdar","year":"2007","journal-title":"Inf. Syst."},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Politou, E., Alepis, E., and Patsakis, C. (2018). Forgetting personal data and revoking consent under the GDPR: Challenges and Proposed Solutions. J. Cybersecur., 1\u201320.","DOI":"10.1093\/cybsec\/tyy001"},{"key":"ref_12","first-page":"61","article-title":"Privacy models for big data: A survey","volume":"3","author":"Victor","year":"2016","journal-title":"Int. J. Big Data Intell."},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"D\u2019Orazio, V., Honaker, J., and King, G. (2015). Differential Privacy for Social Science Inference. SSRN Electron. J.","DOI":"10.2139\/ssrn.2676160"},{"key":"ref_14","first-page":"1","article-title":"Differential Privacy and Social Science: An Urgent Puzzle","volume":"2","author":"Oberski","year":"2020","journal-title":"Harv. Data Sci. Rev."},{"key":"ref_15","first-page":"1880","article-title":"Introduction: Privacy self-management and the consent dilemma","volume":"126","author":"Solove","year":"2013","journal-title":"Harv. Law Rev."},{"key":"ref_16","first-page":"127","article-title":"HyperLogLog: The analysis of a near-optimal cardinality estimation algorithm","volume":"Volume 7","author":"Flajolet","year":"2007","journal-title":"Proceedings of the Conference on Analysis of Algorithms, AofA 07"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Ataei, M., Degbelo, A., Kray, C., and Santos, V. (2018). Complying with privacy legislation: From legal text to implementation of privacy-aware location-based services. ISPRS Int. J. Geo Inf., 7.","DOI":"10.3390\/ijgi7110442"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"136","DOI":"10.1109\/MCOM.2013.6525606","article-title":"The pursuit of citizens\u2019 privacy: A privacy-aware smart city is possible","volume":"51","author":"Solanas","year":"2013","journal-title":"IEEE Commun. Mag."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Singh, A., Garg, S., Kaur, R., Batra, S., Kumar, N., and Zomaya, A.Y. (2020). Probabilistic data structures for big data analytics: A comprehensive review. Knowl. Based Syst., 188.","DOI":"10.1016\/j.knosys.2019.104987"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1111\/tgis.12305","article-title":"A geoprivacy manifesto","volume":"22","author":"McKenzie","year":"2018","journal-title":"Trans. GIS"},{"key":"ref_21","unstructured":"Westin, A.F. (1967). Privacy and Freedom, Atheneum."},{"key":"ref_22","unstructured":"Altman, I. (1975). The Environment and Social Behavior: Privacy, Personal Space, Territory, Crowding, Brooks\/Cole Pub. Co."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"2751","DOI":"10.1109\/ACCESS.2016.2577036","article-title":"Big Privacy: Challenges and Opportunities of Privacy Study in the Age of Big Data","volume":"4","author":"Yu","year":"2016","journal-title":"IEEE Access"},{"key":"ref_24","unstructured":"Samarati, P., and Sweeney, L. (1998). Protecting Privacy when Disclosing Information: K-Anonymity and Its Enforcement through Generalization and Suppression, Computer Science Laboratory, SRI International. Technical Report SRI-CSL-98-04."},{"key":"ref_25","unstructured":"Aggarwal, C.C. (September, January 30). On k-anonymity and the curse of dimensionality. Proceedings of the 31st International Conference on Very Large Data Bases, Trondheim, Norway. VLDB Endowment."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Kamp, M., Kopp, C., Mock, M., Boley, M., and May, M. (2013). Privacy-preserving MOBILITY MONITORING USING sketches of stationary sensor readings. Machine Learning and Knowledge Discovery in Databases. ECML PKDD 2013. Lecture Notes in Computer Science, Springer.","DOI":"10.1007\/978-3-642-40994-3_24"},{"key":"ref_27","first-page":"3","article-title":"Privacy-preserving active learning on sensitive data for user intent classification","volume":"2335","author":"Feyisetan","year":"2019","journal-title":"CEUR Workshop Proc."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Jain, P., Gyanchandani, M., and Khare, N. (2016). Big data privacy: A technological perspective and review. J. Big Data, 3.","DOI":"10.1186\/s40537-016-0059-y"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Dwork, C., McSherry, F., Nissim, K., and Smith, A. (2006). Calibrating noise to sensitivity in private data analysis. Theory of Cryptography Conference, Springer.","DOI":"10.1007\/11681878_14"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/978-3-540-79228-4_1","article-title":"Differential privacy: A survey of results","volume":"Volume 4978","author":"Dwork","year":"2008","journal-title":"Theory and Applications of Models of Computation: Proceedings of the Fifth International Conference, TAMC 2008, Xi\u2019an, China, 25\u201329 April 2008"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Machanavajjhala, A., He, X., and Hay, M. (2017). Differential privacy in the wild: A tutorial on current practices & open challenges. Part F127746. Proc. ACM SIGMOD Int. Conf. Manag. Data, 1727\u20131730.","DOI":"10.1145\/3035918.3054779"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Fan, L., and Xiong, L. (2012). Real-time aggregate monitoring with differential privacy. ACM Int. Conf. Proc. Ser., 2169\u20132173.","DOI":"10.1145\/2396761.2398595"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Dwork, C., Naor, M., Pitassi, T., and Rothblum, G.N. (2010, January 6\u20138). Differential Privacy Under Continual Observation. Proceedings of the Forty-Second ACM Symposium on Theory of Computing, STOC\u201910, Cambridge, MA, USA.","DOI":"10.1145\/1806689.1806787"},{"key":"ref_34","doi-asserted-by":"crossref","unstructured":"Bianchi, G., Bracciale, L., and Loreti, P. (2012, January 26\u201328). \u201cBetter Than Nothing\u201d privacy with bloom filters: To what extent?. Proceedings of the 2012 International Conference on Privacy in Statistical Databases, Palermo, Italy.","DOI":"10.1007\/978-3-642-33627-0_27"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Yu, Y.W., and Weber, G.M. (2019). Federated queries of clinical data repositories: Balancing accuracy and privacy. BioRxiv, 841072.","DOI":"10.1101\/841072"},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"26","DOI":"10.2478\/popets-2019-0018","article-title":"Cardinality Estimators do not Preserve Privacy","volume":"2","author":"Desfontaines","year":"2019","journal-title":"Proc. Priv. Enhancing Technol."},{"key":"ref_37","unstructured":"Wright, C., Skvortsov, E., Kreuter, B., and Wang, Y. (2020). Privacy-Preserving Secure Cardinality and Frequency Estimation, Google LLC."},{"key":"ref_38","doi-asserted-by":"crossref","unstructured":"Andreescu, T., and Feng, Z. (2004). Inclusion-exclusion principle. A path to Combinatorics for Undergraduates, Birkh\u00e4user.","DOI":"10.1007\/978-0-8176-8154-8"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s13059-019-1875-0","article-title":"Dashing: Fast and accurate genomic distances with HyperLogLog","volume":"20","author":"Baker","year":"2019","journal-title":"Genome Biol."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"G\u00f3mez-Barr\u00f3n, J.P., Manso-Callejo, M.\u00c1., Alcarria, R., and Iturrioz, T. (2016). Volunteered geographic information system design: Project and participation guidelines. ISPRS Int. J. Geo-Inf., 5.","DOI":"10.3390\/ijgi5070108"},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"276","DOI":"10.1006\/obhd.1995.1079","article-title":"Equity, Equality, or Need? The Effects of Organizational Culture on the Allocation of Benefits and Burdens","volume":"63","author":"Mannix","year":"1995","journal-title":"Organ. Behav. Hum. Decis. Process."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1145\/1924421.1924442","article-title":"Crowdsourcing systems on the World-Wide Web","volume":"54","author":"Doan","year":"2011","journal-title":"Commun. ACM"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Chen, Y., Parkins, J.R., and Sherren, K. (2017). Using geo-tagged Instagram posts to reveal landscape values around current and proposed hydroelectric dams and their reservoirs. Landsc. Urban Plan., 170.","DOI":"10.1016\/j.landurbplan.2017.07.004"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Kennedy, L., and Naaman, M. (2008, January 21\u201325). Generating diverse and representative image search results for landmarks. Proceedings of the 17th International Conference on World Wide Web, WWW\u201908, Beijing, China.","DOI":"10.1145\/1367497.1367539"},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Wood, S.A., Guerry, A.D., Silver, J.M., and Lacayo, M. (2013). Using social media to quantify nature-based tourism and recreation. Sci. Rep., 3.","DOI":"10.1038\/srep02976"},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Heikinheimo, V., Minin EDi Tenkanen, H., Hausmann, A., Erkkonen, J., and Toivonen, T. (2017). User-Generated Geographic Information for Visitor Monitoring in a National Park: A Comparison of Social Media Data and Visitor Survey. ISPRS Int. J. Geo-Inf., 6.","DOI":"10.3390\/ijgi6030085"},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"249","DOI":"10.1016\/j.tourman.2018.12.005","article-title":"Quantifying nature-based tourism in protected areas in developing countries by using social big data","volume":"72","author":"Kim","year":"2019","journal-title":"Tour. Manag."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"465","DOI":"10.1016\/j.jenvman.2018.05.045","article-title":"Recreational use in dispersed public lands measured using social media data and on-site counts","volume":"222","author":"Fisher","year":"2018","journal-title":"J. Environ. Manag."},{"key":"ref_49","unstructured":"Schaffer, M., Schartner, P., and Rass, S. (2007, January 25\u201328). Universally unique identifiers: How to ensure uniqueness while protecting the issuer\u2019s privacy. Proceedings of the 2007 International Conference on Security and Management, SAM\u201907, Las Vegas, NV, USA."},{"key":"ref_50","doi-asserted-by":"crossref","unstructured":"Shi, X., Yu, Z., Fang, Q., and Zhou, Q. (2017). A Visual Analysis Approach for Inferring Personal Job and Housing Locations Based on Public Bicycle Data. ISPRS Int. J. Geo-Inf., 6.","DOI":"10.3390\/ijgi6070205"},{"key":"ref_51","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1145\/2812802","article-title":"YFCC100M: The New Data in Multimedia Research","volume":"59","author":"Thomee","year":"2016","journal-title":"Commun. ACM"},{"key":"ref_52","doi-asserted-by":"crossref","unstructured":"Dunkel, A., L\u00f6chner, M., and Burghardt, D. (2020). Supplementary Materials (release v0.1.0) for Privacy-aware visualization of volunteered geographic information (VGI) to analyze spatial activity: A benchmark implementation. Data Repos.","DOI":"10.3390\/ijgi9100607"},{"key":"ref_53","first-page":"585","article-title":"A Privacy Preserving Data Mining Approach for Handling Data with Outliers","volume":"11","author":"Priya","year":"2017","journal-title":"Adv. Nat. Appl. Sci."},{"key":"ref_54","doi-asserted-by":"crossref","first-page":"47","DOI":"10.1007\/s10115-010-0311-2","article-title":"The k-anonymity and l-diversity approaches for privacy preservation in social networks against neighborhood attacks","volume":"28","author":"Zhou","year":"2011","journal-title":"Knowl. Inf. Syst."},{"key":"ref_55","doi-asserted-by":"crossref","unstructured":"Gruteser, M., and Grunwald, D. (2003, January 5\u20138). Anonymous Usage of Location-Based Services Through Spatial and Temporal Cloaking. Proceedings of the First International Conference on Mobile Systems, Applications, and Services (MobiSys), San Francisco, CA, USA.","DOI":"10.1145\/1066116.1189037"},{"key":"ref_56","doi-asserted-by":"crossref","first-page":"94","DOI":"10.1016\/j.datak.2015.06.012","article-title":"Hiding outliers into crowd: Privacy-preserving data publishing with outliers","volume":"100","author":"Wang","year":"2015","journal-title":"Data Knowl. Eng."},{"key":"ref_57","first-page":"418","article-title":"Geocookie: A space-efficient representation of geographic location sets","volume":"22","author":"Ruppel","year":"2014","journal-title":"J. Inf. Process."},{"key":"ref_58","doi-asserted-by":"crossref","first-page":"482","DOI":"10.1080\/00330124.2012.700499","article-title":"Head\/Tail Breaks: A New Classification Scheme for Data with a Heavy-Tailed Distribution","volume":"65","author":"Jiang","year":"2013","journal-title":"Prof. Geogr."},{"key":"ref_59","unstructured":"Ertl, O. (2018). Method and System to Estimate the Cardinality of Sets and Set Operation Results from Single and Multiple HyperLogLog Sketches. (15\/950,632), U.S. Patent Application No."},{"key":"ref_60","doi-asserted-by":"crossref","unstructured":"De Andrade, S.C., Restrepo-Estrada, C., Nunes, L.H., Rodriguez, C.A.M., Estrella, J.C., Delbem, A.C.B., and Porto de Albuquerque, J. (2020). A multicriteria optimization framework for the definition of the spatial granularity of urban social media analytics. Int. J. Geogr. Inf. Sci., 1\u201320.","DOI":"10.1080\/13658816.2020.1755039"},{"key":"ref_61","doi-asserted-by":"crossref","first-page":"198","DOI":"10.1016\/j.landurbplan.2015.02.020","article-title":"Social media and the city: Rethinking urban socio-spatial inequality using user-generated geographic information","volume":"142","author":"Shelton","year":"2015","journal-title":"Landsc. Urban Plan."},{"key":"ref_62","doi-asserted-by":"crossref","unstructured":"\u00d8ian, H., Fredman, P., Sandell, K., S\u00e6\u00fe\u00f3rsd\u00f3ttir, A.D., Tyrv\u00e4inen, L., and Jensen, F.S. (2018). Tourism, nature and sustainability: A review of policy instruments in the Nordic countries, Nordic Council of Ministers.","DOI":"10.6027\/TN2018-534"},{"key":"ref_63","doi-asserted-by":"crossref","first-page":"143","DOI":"10.1016\/j.techfore.2016.09.029","article-title":"Real Time Spatial Delphi: Fast convergence of experts\u2019 opinions on the territory","volume":"115","author":"Lamelza","year":"2017","journal-title":"Technol. Forecast. Soc. Change"},{"key":"ref_64","doi-asserted-by":"crossref","unstructured":"Reviriego, P., and Ting, D. (2020). Security of HyperLogLog (HLL) Cardinality Estimation: Vulnerabilities and Protection. IEEE Commun. Lett., 1.","DOI":"10.1109\/LCOMM.2020.2972895"}],"container-title":["ISPRS International Journal of Geo-Information"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2220-9964\/9\/10\/607\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T10:24:37Z","timestamp":1760178277000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2220-9964\/9\/10\/607"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,20]]},"references-count":64,"journal-issue":{"issue":"10","published-online":{"date-parts":[[2020,10]]}},"alternative-id":["ijgi9100607"],"URL":"https:\/\/doi.org\/10.3390\/ijgi9100607","relation":{},"ISSN":["2220-9964"],"issn-type":[{"value":"2220-9964","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,10,20]]}}}