[judge2020]

Well, the only thing you can do is attempt not to store PII and only pull very limited information from the browser, ideally just the utm tags, referrer, and maybe some available api feature flags (eg. say you want to roll out webauthn and want to figure out how many of your users' browsers have that capability). Unless you trust that the site has `access_logs off`, tracking can just be done by analyzing those access logs even for users with noscript.