The estimate is previous_count * (1 - elapsed/window) + current_count. It needs a few numbers per key, unlike a sliding log that stores every timestamp.