"In addition, the Act and Rule also cover information such as hobbies, interests, and other information that can be collected through cookies or other tracking mechanisms that are tied to identifiable information." . . . .