Cookies are not stalking. If cookies are to be compared to anything in the real world, it would be radio tagging an animal, except that cookies only work some of the time, and the tags can be removed or rejected (see, even that's not such a good metaphor). You dare not start down the path of creating metaphors for all Internet activity and then start legislating based on that; it will not work. It creates a miasma of legislation and will not 'scale', in engineering parlance; you are constantly creating new special cases for the Internet program du jour.