Two-factor auth, cookieless tracking, and revenue analytics
Secure your account with 2FA, track sites without cookies for GDPR-friendly analytics, and see revenue broken down by source, country, and device.
Account security
Two-factor authentication is now available to protect your ShonyLabs account, alongside self-serve password reset via email for anyone who gets locked out.
A cookieless way to track
For sites that want to avoid a cookie consent banner entirely, we shipped a second tracking script that never touches cookies, localStorage, or sessionStorage. Visitor and session identifiers are instead derived server-side from a rotating, salted hash of IP and user agent. It's a deliberate trade-off: slightly less accurate long-window returning-visitor and revenue attribution, in exchange for not needing consent UI at all.
Revenue analytics
This release also adds real revenue analytics: track transactions from your own backend and see revenue broken down by source, country, device, and more, right alongside your traffic. Identified visitors are now merged across every device they've used, and any visitor — identified or anonymous — can be manually tagged (VIP, spam, and so on) for your own segmentation.
Also in this release
Funnels were redesigned, the backend event pipeline is faster and more reliable, several dropdown/tooltip/live-map layout bugs on mobile were fixed, and we hardened security across the platform.
What shipped
- NewTwo-factor authentication for your account.
- NewPassword reset via email.
- NewA cookieless tracking mode — no cookies, localStorage, or sessionStorage — for sites that want to skip a consent banner.
- NewRevenue analytics: track transactions and see revenue broken down by source, country, device, and more.
- NewVisitors are now merged across devices once identified, and can be manually tagged (e.g. "VIP", "spam").
- ImprovedRedesigned funnels.
- ImprovedFaster, more reliable event pipeline under the hood.
- FixedDropdown, popover, tooltip, and live map layout issues on mobile.
- FixedGeneral security hardening across the platform.