HTTP APIs are very common, I don't think anybody is trying to track users through them. I don't think whether they are REST or not makes any difference for trac

HTTP APIs are very common, I don't think anybody is trying to track users through them. I don't think whether they are REST or not makes any difference for tracking purposes, the client can always include a user/session ID.