Actually, I think it's more along the lines of what data is sent from the user to the server. Apparently they don't "match". Personally, I think they track with the user's ip address instead of their username. Depending on where you are in the country, you could have any number of ip addresses assigned as you switch connections.