What about cross-site tracking? As long as the top-level domain is the same (ex. app.example.com and example.com), any cookie set…