what i dont understand so far:

i go to the mints website, get a token. the mint can log my ip and which token string i get

then i pay with the token, the receiver goes to the mint, enters it into a textarea to redeem it for lightning. The mint can also log the receivers ip and the token string. 

so it knows who transacted with whom. What do i get wrong here?