One relatively standard way to identify someone is to generate a small token which you can give to them, and which they can later give back to you. This is a classic “user cookie” scenario. The ID could be any data which is unique, but it should also be hard fake – you shouldn’t [...]