Browser fingerprinting can be used to track users just as cookies do, but using much more subtle and hard-to-control techniques. It's likely illegal under the GDPR. https://www.eff.org/deeplinks/2018/06/gdpr-and-browser-fingerprinting-how-it-changes-game-sneakiest-web-trackers