>And where, and when. That's pretty sensitive information.

Both can be addressed by batching uploads, as described in the gp comment.