@stux i refuse to use a bastardize technology marketers ruined like cookies. What I do for session tracking is take the requesting IP address and use it as a tracking token, but once they leave, the session token is invalidated because they are no longer on the site. It makes sessions empherial so therefor nothing outside of the site can use the token for any kind of tracking.