Trackers and fingerprinting don't ask permission. Here's what's actually exposed, and what to do about it.