If it's not cookies, it will be something else. IP addresses, tracking pixels, browser fingerprinting.

The Do Not Track header is the only technology needed. The rest is compelling companies to obey it.