4 Years of EU Cookie Law: Results and Lessons Learned