Tracking pixels let social media companies spy on users even after they click over to advertiser sites, gleaning credit card info, geolocations, and more.