Can someone explain how the hell this is even possible? Surely a random website can't read any other random website's session data? Is Google cooperating somehow?