User blog comment:Truecat903/Is this possible?/@comment-35998649-20191210044629

Yes, especially nowadays where they can take your .ROBLOSECURITY cookie even if you don't give any login details.