Something I noticed on a few websites, including stackoverflow, is that they leave tracking settings up to a different website, which still lets that external party know what websites a user has been seeing, and this can be maliciously abused.

I realize this might have been mentioned before, but I didn’t see any similar posts in a quick search.