Collecting Individual Trajectories under Local Differential Privacy