Explicit requests not to be tracked are being ignored, even in US states where such privacy matters are law.