Privacy-Preserving Content Routing