That's why we need generic legislation without consideration of specific technologies, restricting the general goals, not just one particular way to achieve the

That's why we need generic legislation without consideration of specific technologies, restricting the general goals, not just one particular way to achieve them. GDPR would forbid this tracking without opt-in consent - the fact that you have the technical ability to effectively handle tracking information server-side without support from the user/browser (as for cookies) does not imply that you have the right to do so. We don't have to win a technical fight, we have to ensure that privacy-invasive tracking is not profitable because all the major legitimate megacorp advertisers throwing billions at internet ads are prohibited from using that.