The key to OHTTP's privacy guarantee is that the relay and the gateway must be operated by different entities and must not collude; otherwise, the privacy promise is rendered meaningless.