Extremal mechanisms for local differential privacy | Synapse