Privacy and anonymous mode

Normally a response is stored with a hashed IP address, a user agent string and some coarse device details, which is how duplicate prevention and visit insights work.

With anonymous mode on, none of that is written. The answers are stored; the metadata is not. It is free, on every plan. See the anonymous survey maker for the longer version.

It cannot make a question anonymous that you wrote to identify someone. If you ask for a name, an email address or a staff number, you will get one — and the response will no longer be anonymous no matter what the switch says.

It also turns off the features that need that metadata: duplicate prevention by device and some visit insights. That is a fair trade for honest answers, but know you are making it.

Say so on the first screen, in one sentence, in plain words. "This survey is anonymous. We don't record your name, your email address or your IP address." People answer more honestly when they believe you, and they believe you when the wording is specific.

You can delete a response, a survey or your whole account at any time. On Pulseware Business, retention rules delete responses for you on a schedule.

For what we store, who processes it and where: the privacy policy, the security page and the AI data policy. To wipe everything, delete your data.