"The Spinner* sends you an innocent looking link. This link is sent to the target via text message. When the target presses the link, a cookie connected to the link attaches itself to the target’s phone."
Is this legal? I never click on links sent via SMS.