These platforms routinely track user IP addresses and browsing habits, selling the data to third-party brokers.