The students say the university has allowed the companies to deploy “surreptitious online tracking tools” on its student portal to gather the information, in violation of federal privacy laws.