Some sort of event bus decoupling would work. one time hash associated with request. Requester subscribes to information with that hash. Any simple IP logging defeated by VPN. No tracking by public key.
Are there other options than parting with a nostr private key?