‘Cookies’ track your every move online. Now there’s a fight over what should replace them