How anonymity works.
No names. No sign-in. Just your honest take. This page says exactly what Pulse and Offbeat keep about a voter, what they never keep, and where the limits are.
What a vote carries.
Stored about a voter
- A random id. It is made in the voter’s own browser, kept there, and used for one session. It lets a phone change its answer and stops the same browser answering a question twice.
- Their answers and the time each one arrived.
- The time they joined, and any Q&A questions they upvoted.
- A quiz nickname, only if the voter chooses to pick one for the leaderboard.
- A “done” marker, if they press I’m done.
Never stored
- Names or email addresses of voters.
- IP addresses.
- Device or browser details.
- Voter accounts. There are none. Voters never sign in.
- Any link between a person and the answers they gave.
The details, in plain words.
What hosts and admins see
Totals and anonymous text. Exports contain answers only: no names, no ids and no per-answer times. Nobody can look up who voted for what, and that includes us: the record does not exist.
Written answers
What a voter types is shown to the host as anonymous text. If someone types their own name into an answer, it is there to read. Hosts can hold written answers back until they approve them.
Small groups
In a very small group an answer can sometimes be guessed. An admin can set a smallest number of answers before any result is shown. It is off until an admin switches it on.
Stopping floods
To stop one network flooding a session, the server counts connections by network address for up to an hour. The count is held in memory only and is never saved.
People who run polls
Hosts do sign in. An activity log records their sign-ins and changes to people and settings. It never records who voted for what.
Staff check-in
A signed-in member of staff can check in to a meeting. That records attendance only. Votes are stored separately, with no stored link to the account.
Offbeat links and invitations
Everyone gets the same link, and Offbeat does not record who opened it or who answered. The list of people invited is built by the organiser, never from who joined or voted, and is kept apart from the answers.
AI summaries
Off unless an admin connects them. When a host asks for a summary of written answers, those anonymous answers are sent, with the question, to Anthropic’s Claude to be grouped into themes.
Cookies and tracking
This site sets no cookies and runs no analytics or tracking scripts. In the app, hosts get a sign-in cookie. A voter’s random id is kept in their own browser.
Who else handles data.
Three companies process data for us. This is the whole list.
Cloudflare
Runs the app and this site, and stores the app’s data. Like any network, it handles each visitor’s IP address to deliver pages. The app never saves a voter’s address. For sign-in attempts by hosts it keeps a short-lived scrambled counter to slow password guessing.
Resend
Sends email: sign-in links for hosts, calendar invitations, Offbeat links, reminders and results to the addresses an organiser enters, and account and report emails to hosts.
Anthropic
Only when an admin has connected AI summaries: receives the question and the anonymous written answers a host asks to have summarised.
Connections an admin chooses to switch on, such as Slack, a Google or Microsoft calendar, or Duo at sign-in, send data to those services only when they are used.
What we cannot claim yet.
Defib is new. We hold no security certifications and have not had an independent audit, so you will not see badges on this site. Our privacy policy and terms are still being prepared.
If you find a security problem, write to security@getdefib.com. For anything else about your data, write to hello@getdefib.com.