I always just assumed the card provider put a cookie on your browser when you logged in to their site (to check your bill e.g) and then sold part of this ID wit

I always just assumed the card provider put a cookie on your browser when you logged in to their site (to check your bill e.g) and then sold part of this ID with the purchase history. Could be way off here though.