Comment by ptaipale

I guess this isn't typically based on cookies but device/browser fingerprinting.