Authors provide a privacy-preserving targeted ad system (PPOAd) via a User Ad Proxy which facilitates the anonymous expression of ad preferences and uses a blacklistable unlinkable credential system for registration credentials and an accountable ecash scheme for ad clicks. User information is only revealed if user clicks on an ad too many times, or attempts to double-spend an ad click allotment.