Public anonymous
Anyone with the link can answer. The response does not have a participant or email link. Avoid asking for identifying details.
Open feedbackBe clear about
what you collect.
Privacy starts with the questions you ask and the collection mode you choose.
Identified
Responses are intentionally linked to an email address. Use personal invitations when the survey is for a known group.
Follow-up & accountabilityControlled anonymous
A personal link can be used once. The participation ledger records that it was used; the answer record contains no participant link.
Separate participation and answersAnonymous responses and cookies
No identity is requested. Avoid identifying details in your answers. A completion cookie helps prevent repeat submissions from this browser for one year.
This describes public anonymous surveys. Clearing cookies, using a private window or changing browsers can allow another submission. Saved-progress data is separate from the completion cookie.
Know the boundaries
No survey setting can make identifying free text anonymous. Small groups, detailed answers and hosting logs may also allow an operator to infer identity. Review your questions and operational practices before collecting sensitive feedback.
Access follows responsibility
Organization roles control who can build surveys, review responses, export data and manage team access. Privacy can change before any submissions are collected. After collection starts, copy the survey to use a different privacy mode. Every response stays attached to the version its participant saw.
Keep your responses portable
Download version-specific CSV or XLSX files, and restrict exports to the people who need them.
YOUR NEXT CONVERSATIONMake feedback part
Choose your plan ↗