Privacy-first strategies for a cookieless world