If cookieless, how do you accurately aggregate/assign pageviews per visitor?

Browser fingerprinting is one possible way.

https://panopticlick.eff.org/

[edit: clarified that this is a solution, I have no knowledge as to whether that is what is done.]

Do you actually know that fingerprinting is used or is just an assumption?

They seem to only be collecting screen resolution, viewport size and whether ads are showing client side (tested by trying to load a file called ads.js that inserts a div into the dom). I assume server-side they combine this with user agent string and ip address.

Screen resolution & viewport size aren't being used. They were added many months ago when we first started development.

So you're just doing UA + IP? Seems like that would be plenty for your use case.

I just hope more people start running with NoScript and then all this nonsense is meaningless anyway:)

I'm actually just running a script blocker in default deny now - running an adblocker as well doesn't seem to be necessary.

you hope?