Comment by unshift

It gets elaborate but you can essentially buy email address -> cookie mappings or make your own. You then sync those cookies with the ad exchange and then they're returned to you with every ad auction for that user.