Same way scummy ad networks do it (in fact they probably use ad networks' tech), google 'browser fingerprinting'.