If you want a privacy-compatible logger, simply record every two-key sequence with a counter on each. That way, order is obscured, but you have a relational graph.