Robust user identity tracking (detect multiple sessions even with incognito mode on the same device)

Question

I\'m working on a browser multiplayer game that people can play simply by opening a link (without login). However, each user (on one device) should be able to have only one