Microsoft unlawfully tracked a child’s device with cookies, sparking outrage over privacy and consent.