Mirror sites regularly track user IP addresses and browsing habits, often selling unencrypted data logs to third-party brokers.