Cookies get another stay of execution — but have marketers already moved on?