All docs
Security & Architecture

Respondent anonymity and zero telemetry

1 min readUpdated May 6, 2026

InviziPoll constrains the respondent experience to protect anonymity and reduce unnecessary data collection:

  • Minimum audience size: Poll settings include a minimum recipients recommendation when you design distribution. That is separate from the results unlock threshold (see Aggregate results and anti-inference) but reinforces responsible sharing.
  • Security banner: Respondent pages show a static privacy tip recommending a personal network or VPN where that fits your threat model.
  • Zero-telemetry pledge: Respondent surfaces include a visible commitment to no telemetry on the response flow.
  • No third-party analytics on respond flows: Respondent pages do not load marketing or behavioral analytics scripts.

These controls complement cryptography: strong encryption does not help if the delivery channel or page behavior deanonymizes people. The banner and pledge are user-visible signals; organizational policy and how you distribute links still matter.

Public website: InviziPoll may use first-party, privacy-oriented analytics on public marketing pages only. Respondent flows and the signed-in admin app are not included in that analytics scope.

Admin-side analytics remain aggregate-only after unlock. See Aggregate results and anti-inference.