A Web analytics company that tracked the browsing behavior of millions of US consumers has agreed to settle federal charges that it collected credit card numbers, financial account information, and other sensitive data without proper notice.