You are right that if this is just a unique identifier that gets into the cookie and you cannot link it to the actual user then it's fine. My point was rather

You are right that if this is just a unique identifier that gets into the cookie and you cannot link it to the actual user then it's fine. My point was rather for non-cookie based kind of identification, but it was no clear enough.