Survey responses are stored securely and never sold or shared with third parties. Identifying information — such as name and district — is only collected when you explicitly provide it and is never required for participation.
Anonymous research participation is supported when a form does not request contact details. Product analytics are different: Identifiable product analytics are product events linked to an account identifier in Supabase or a PostHog distinct ID when PostHog capture is enabled, so we can understand feature usage, verification state, and feature-flag cohorts.
When we share findings, we use de-identified reporting or aggregate statistics, never individual responses. Internal Supabase product analytics are on for authenticated users. Third-party analytics and pixels require the runtime enable flag plus an analytics-consent grant; Global Privacy Control on web overrides any prior grant for consent-gated tracking. Identifiable product analytics follow the account-deletion and de-identification workflow; aggregate statistics that no longer identify a person or account may be retained indefinitely. Participants may withdraw from research at any time without consequence.