Fingerprinting is nearly impossible with JS and cookies disabled, which is how I casually browse. And yes i spoof my user agent. IP is their best signal, and admittedly they fall back to that. I often get ads intended for my housemates.