Different token every time. If something leaks then only the private tokens are leaked. You then have to break every site you visited to link them to you individually.