In addition, the final rule adds to the examples of information covered by the rule any information that the institution collects through an information-collecting device from a web server, often referred to as a cookie.84 This example illustrates one of the many ways that a financial institution may obtain information about a consumer in connection with providing a financial product or service