Replying to @deaneckles and @fborgesius
Retargeting is indeed a complicated case. I would tend to say that ITP-level retargeting (you have 24h within which to recognise a user) could be fine, again because of the limited scope. But that’s really up for discussion.
♥ 1