Option A is insufficient, as cookies are a mere implementation detail about how tracking is done, and the tracking is the concern.