Respondent anonymity and zero telemetry

Heads up: Respondent pages emphasize anonymity and no third-party tracking on the answer flow. Marketing pages may use first-party analytics, not the same scope as respond or admin (see Aggregate results…).

InviziPoll constrains the respondent experience to protect anonymity and reduce unnecessary data collection:

Minimum audience size: Poll settings include a minimum recipients recommendation when you design distribution. That is separate from the results unlock threshold (see Aggregate results and anti-inference) but reinforces responsible sharing.
Security banner: Respondent pages show a static privacy tip recommending a personal network or VPN where that fits your threat model.
Zero-telemetry pledge: Respondent surfaces include a visible commitment to no telemetry on the response flow.
No third-party analytics on respond flows: Respondent pages do not load marketing or behavioral analytics scripts.

These controls complement cryptography: strong encryption does not help if the delivery channel or page behavior deanonymizes people. The banner and pledge are user-visible signals; organizational policy and how you distribute links still matter.

Public website: InviziPoll may use first-party, privacy-oriented analytics on public marketing pages only. Respondent flows and the signed-in admin app are not included in that analytics scope.

Admin-side analytics remain aggregate-only after unlock. See Aggregate results and anti-inference.