how amazon do Web content personalization

I'm wondering how websites like amazon do Web content personalization based on user activities or behavior ? do they access the user browsing history or use cookies ? and is that legal ? sorry if my question so silly and any help and guidance really appreciate it thank you in advance