Facebook, Instagram inject ‘tracking code’ in in-app browser to monitor usage: Report