Okay, I lied, it's being done via a sessionid/id cookie (apparently the cookie with an 'x' in Chrome doesn't mean cookies are being blocked... but rather some cookies got blocked).

My next question is, how long are the anonymous models stored?