Tracking (or “personalization”) should always be opt-in.