Yes of course they can, but without cookies permanently enabled it is a waste of time. They just have to re-enter their details for every post.
