Analysing cookies
Cookies (files stored locally which identify users/link them to sites) are another potential attack vector. Like the browsing history, they can reveal where you go and what your account name might be.
As with #1, incognito mode can also come in handy here.
Recommendations:
Disabling cookies is touted as a potential solution, but this has been a problematic “fix” for years since many sites depend on cookies or at least severely limit your functionality (or possibly annoy you with nagging prompts) if these are turned off.
Instead, purging cookies periodically can help protect you, though be prepared to enter information repeatedly as prompted by websites.