In multi-seller online marketplaces, centrally aggregating user interaction data to drive personalized recommendations often leads to cross-seller privacy leakage, which results in the potential reconstruction of sensitive preferences and unintended disclosure of sellers’ strategic signals. Privacy-preserving mechanisms that rely only on public, shareable signals can enable personalization in these settings by augmenting local marketplace feedback …