I would bet by fingerprinting the visitor's browser window: https://panopticlick.eff.org/