A joint investigation conducted by Motherboard and PCMag, published this week, revealed that information scraped by Avast from users and handed over to Jumpshot is linked to individuals through a unique ID in an effort to anonymize them — but it is possible to pick apart data strings to de-anonymize users and reveal their identity, tracing their online footprint, browsing habits, and purchases.