Privacy Policy
Last updated: June 23, 2026
Unmoatable Analytics (“Unmoatable,” “we,” “us”) is a privacy-friendly web analytics service operated by Pinion Ventures, LLC. We built Unmoatable to give website owners useful traffic statistics without tracking, profiling, or identifying individual visitors. This policy explains what we collect and why. For a plain-language overview, see How we handle data.
No cookies, no personal data
Unmoatable does not use cookies and does not store any persistent identifier on a visitor’s device. We do not collect names, email addresses, or any directly identifying information about the visitors of sites that use Unmoatable. We do not sell data, and we do not share it with advertisers or data brokers.
What we collect
When someone visits a website running our tracking snippet, we record a pageview with a minimal set of non-identifying technical details:
- Page URL path (query strings and fragments are stripped before storage)
- Referrer and UTM campaign tags, when present
- Browser, operating system, and device type (derived from the user-agent)
- Screen width bucket
- Approximate location (country, region, and city), derived at Cloudflare’s edge from the IP address — we never store the IP address itself
- Timestamp of the visit
How we count visitors without identifying them
To distinguish one visitor from another within a day, we generate a rotating hash from the visitor’s IP address, user-agent, the date, and a per-site secret. The raw IP address is never written to storage — only this one-way hash, which cannot be reversed to recover the original inputs and resets every day. The next day, the same person produces a different hash, so visitors cannot be tracked across days or across different websites.
Do Not Track
Our tracking snippet honors the browser’s Do Not Track signal: if a visitor has Do Not Track enabled, no event is sent.
Legal basis and your role (GDPR)
For website owners using Unmoatable, you are the data controller and Unmoatable acts as your data processor. Because we collect no personal data and use no cookies or device storage, we believe sites using Unmoatable generally do not need a cookie-consent banner for our analytics. This is our position, not legal advice — consult your own counsel for your jurisdiction and use case.
Sub-processors
We rely on a small number of infrastructure providers to run the service:
- Cloudflare — hosting, edge processing, and analytics data storage
- Clerk — authentication for dashboard accounts
Data retention
We retain aggregated event data for as long as your site is active. When you delete a site or close your account, that data stops being shown and ages out of our systems. Account information is removed when you delete your workspace.
Account data
To operate dashboard accounts we store your email address and the sites you create (name, domain, and settings). Authentication is handled by Clerk; see Clerk’s privacy policy for how sign-in credentials are processed.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.
Contact
Questions about privacy or your data? Email [email protected].