Wellness Pulse
Architectural anonymity | QR code native
30‑second evidence board
ANONYMITY REALITY CHECK
Most “anonymous” survey tools still track people.
Wellness Pulse doesn’t.
Scan this board like an airport security screen. If a platform collects IPs, cookies, logins, or identifiers, it is not end‑to‑end anonymous—no matter what the marketing page says.
Evidence board: what platforms actually collect
Focus on the red dots and “NO / MIXED” badges—those are the silent identity leaks: IP logs, cookies, login links, and response‑level identifiers.
Green = architecturally anonymous · Red = trackable by design
Platform
Overall
Can anyone realistically re‑identify people?
Login / ID Links
Emails, SSO, per‑person URLs
True by‑design anonymity?
Anonymous even if admin mis‑configures
YES
End‑to‑end anonymous
No Google logins, no cookies, no personal IDs, IPs hashed one‑way.
No logins, no per‑user links
Nothing to tie a response to a person.
YES
Anonymous by architecture
You can’t accidentally turn anonymity off.
Qualtrics
Research‑grade survey suite
MIXED
Depends on admin settings
Default: IPs & metadata collected unless explicitly disabled.
Contact‑list links per person
Unique URLs can reveal exactly who responded.
NO
Not anonymous by default
A single mis‑click in settings breaks anonymity.
SurveyMonkey
General survey tool
MIXED
“Anonymous” toggle hides some data
Back‑end IP retention and metadata remain.
Email / SSO & per‑invite links
Creators can match responses back to invitees.
NO
Not anonymous by design
Provider staff can access identifiable logs.
Google Forms
Free forms inside Google’s ad ecosystem
NO
Tied into Google account & IP stack
Universities explicitly warn: not truly anonymous.
“Collect emails” just one click away
Most “internal” forms run while logged‑in.
NO
Built for convenience, not anonymity
Ad‑driven telemetry and account data remain.
Culture Amp, Officevibe, 15Five
Engagement & performance platforms
NO
Engagement‑first, not anonymity‑first
User accounts and HRIS data sit at the core.
Always tied to named employee records
“Confidential” ≠ anonymous; manager views depend on identity.
NO
Not structurally anonymous
The system is built to know who each response belongs to.
If a platform needs a cookie banner, it’s already collecting more than you think.
- IP logs + device fingerprints + timestamps are enough to single someone out in a small team.
- Per‑user survey links or SSO mean responses can be tied back to named people—forever.
- “We don’t show you the IP address” is not the same as “we never collect it.”
This visual board summarizes how common EX & CX tools handle identifiers like IP addresses, cookies, logins, and survey links, based on their published product behavior and documentation at the time of writing. For a narrative explanation of why Wellness Pulse is architecturally anonymous—no logins, no cookies, no per‑person URLs—read “True Anonymity in Employee Feedback: Why Wellness Pulse Stands Alone.”
For detailed, vendor‑specific behavior, see each platform’s own privacy and security documentation, for example:
- Qualtrics Trust Center and Privacy documentation at qualtrics.com.
- SurveyMonkey Privacy Notice and “Are my surveys anonymous?” help articles at surveymonkey.com.
- Google Workspace privacy & security information, which also governs Google Forms, at policies.google.com.
- Jotform’s security and privacy pages at jotform.com.
Disclaimer: This board reflects our best understanding of how these platforms handle identifiers as of 2025, based on their public documentation and customer reports. Features and practices may change over time. If you see anything that’s out of date or incomplete, please email support@wellpulse.org so we can update it.