I based my assumptions on the parts in Revolts privacy policy, since reading the privacy policy of hCatpcha it alludes that each 'vendor' can select how much data they'd like to collect I assumed that Revolt only allowed them to collect IP, length of time on site and mouse movements. While they do sell information, they claim it to be anonymised and I contacted support to see how they did that for IP addresses.

Which is why I don't really mind. The information they have of me is at most how my cursor moved, how long I took to Submit a login request, Submit a registration request, Submit a password reset / email resend request and an obfuscated IP. Seems OK to me.