Private data and token transfer