No cookie, no location prompt, no permission dialog — and it still guesses your device’s model, roughly how old it is, and where you’re sitting. The trick is passive fingerprinting: screen size, GPU rendering quirks, timezone, and a dozen other quiet signals your browser hands over on every page load, stitched together into a profile you never agreed to share.