I think it's fairly common knowledge that registering for access to a website in most cases gives them permission to place cookies and gather information.
There are browsers that are more secure than others.
But what, if any, legal protection exists when you encounter a website that is digging for data that is only achievable through exploiting breaches in a browser's design?