they track the user agent string, IP, cookies, and possibly cross-track with third party cookies (but I ain't sure about this one exactly.)
they ID you by your OS, browser version, and possibly screen size. so for example if a bot account has weird user agent strings which match no deal device...