It’s possible to tag something for:userName and have that bookmark sent to the userName. So priv.at simply uses the del.icio.us API to post a bookmark.
The tricky part is what if two people bookmark the same url? Then the bookmark can’t be added, it has to be modified to include the new person.
In order to do this, priv.at keeps a record of every bookmark and every bookmarker, and joins them in a many to many relationship.
When bookmarks are privately posted, priv.at looks to see if the bookmark has been saved privately already, and if it has, then it appends the username/bookmark pair to the list and reconstructs the bookmark and posts it to del.icio.us.
This is why it’s important that the local database and del.icio.us never get out of sync.