Many well-known websites are using third-party analytics scripts to track every movement of visitors to their sites, a study claims.