The right way to implement this is where they don’t even have any persistent identifier that could be used for tracking. They should only ever see a derived single-use signature that gives them a yes/no answer and nothing more.