IP address truncation is not anonymization