Comment by ben_w

Option A is insufficient, as cookies are a mere implementation detail about how tracking is done, and the tracking is the concern.