Just how bad is online tracking?