Privacy Notice
Version 2026-10-11.1 · Effective 2026-09-23
Operator and contact
Propect Works LLC
admin@strudl.ioWho handles your data
The hiddlo operator identified on this page handles creator accounts, service security and operation. The survey creator, identified as the sender on the survey, decides why that survey is run and how its reported answers are used. Contact that controller about their survey and any exported copies. The legal roles and any necessary processing agreements must match the actual arrangement.
Information used to run hiddlo
Optional creator accounts use a verified email address, single-use sign-in codes and login sessions. We process those to take steps you request and provide the account service. We receive survey questions and introductions, reported answers, submission progress, publication times and optional creator context. We keep records of the Terms and consent statements accepted. Service security uses short-lived keyed rate counters derived from network addresses; consent records do not store raw IP addresses, countries, user agents or browser fingerprints. Hosting and mail providers also process connection and delivery data under the arrangements described below.
Account clearance and access requests
Creator accounts require an approved email address or organization domain. Administrators may authorize an exact address or all mailboxes at a specified domain; mailbox verification is still required. These authorization rules, approval times and approving administrators remain until the rule is removed. Administrators can also provide a list of email addresses to authorize and invite. Each recipient receives a separate invitation; no account is created until the recipient chooses to sign in and verifies their mailbox. Queued invitations expire after seven days. A batch receipt containing only the administrator, time and aggregate counts is deleted after 30 days; it does not retain a separate recipient list. You can provide an email and optional purpose, sector and organization for an administrator to review. No email is sent before approval. The request and its context are deleted from the live service 30 days after submission through scheduled maintenance. If approved, your email, approval time and approving administrator are kept separately on the allowed list until an administrator removes the approval. We use that list to send your approval notice and allow sign-in codes. Approval does not verify email ownership; a sign-in code does that. Removing approval stops future sign-in codes but does not close an existing account or sign out existing sessions. Contact the operator to request removal or account closure. Backup and provider retention follow the operator disclosure below.
Product feedback
Signed-in account holders can send product feedback directly to the hiddlo operator. These messages are not randomized. We store the message, its category, an optional reply email you enter, submission time and review status. We do not automatically attach your account identity, survey links or answers. Please do not include individual answers, private links or sign-in codes. The operator uses feedback to improve the service and may use a supplied email to follow up. Feedback and its contact details are deleted from the live service 90 days after submission, regardless of review status, through scheduled maintenance. Security limits also use short-lived keyed account counters, stored separately from feedback. Provider backups follow the retention described below.
Reported answers and your choice
For protected questions, randomization happens on your device. Your original selection is not sent separately or saved. Ordinary questions are sent unchanged. This does not guarantee anonymity, particularly in small groups or identifiable surveys. Each survey identifies its sender: a supplied name marked “not verified” for creators without an account, or the verified account email for signed-in creators. The editor displays that address before publication. Email verification establishes mailbox control, not the sender's real-world identity or the accuracy of the survey. Sender details are fixed at publication and remain part of the survey and consent records. Survey organizers can use explanation cards and questions to provide their own study information and request their own agreement. Those steps are separate from consent to hiddlo processing reported answers. Previously published surveys may also display information supplied by their creator on the opening screen. Protection is explained with each question. Terms acceptance, consent to process reported answers, and acknowledgment of hiddlo’s processing information and private withdrawal option are separate choices. You can decline or stop; declining creates no submission.
Withdraw participation consent
Before you begin, your browser creates a private withdrawal link that you can copy and save. It becomes active when you accept and begin; only its digest is sent at that point. The same link appears again when you finish or choose Exit survey. Save it if you want to return later: we do not automatically store it on your device, and closing a tab cannot show a final reminder. Using its withdrawal button deletes that submission and its reported answers from the live service, including after the respondent link closes or expires. This changes live results. Withdrawal does not affect the lawfulness of prior processing. It cannot automatically remove copies already exported by the creator or immediately rewrite provider backups; contact the survey controller about those copies and retention. Without the private link we may be unable to identify your answers, and we do not collect additional respondent identity merely to reconstruct that link.
Open-ended answers are optional and are stored and shared with the survey creator exactly as written, without randomization. Avoid names or identifying details. Explanation cards collect no answer; a progression receipt lets the survey continue and safely retry a lost request. Withdrawing or deleting a submission removes its text answers and card progression receipts as well as its choice answers.
Storage and deletion
Respondent links close at the survey’s closing date, which the creator can change, or when the creator closes the survey manually. Extending an expired survey preserves its existing responses. The closing date is not a data-deletion deadline. The creator may state a purpose and retention criteria in the survey. If omitted, no creator deletion schedule has been provided. Creators must delete surveys when no longer needed and can do so from their management page. Survey deletion removes the live survey, submissions, reported answers and related assent records. Account records last while the account is maintained; contact the operator to request closure. Participation evidence lasts while the associated data is processed; after withdrawal, the remaining receipt contains no answers and is deleted after 90 days. We retain survey-level withdrawal counts and grouped elapsed-time statistics, without individual withdrawal events or answers, until the survey is deleted. Account and publication assent records last with the relevant account or survey. Expired codes, invitation requests, abuse counters and sessions are cleaned separately. Backup, provider-log and operational retention are specified in the operator disclosure below.
Privacy rights
Where applicable, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent for consent-based processing without affecting earlier lawful processing. Contact the operator or the survey controller as appropriate; you may complain to the relevant data-protection authority. GDPR applicability depends on the operator, targeting and processing circumstances, not solely your IP location or nationality. European/UK information remains available to everyone, including when country detection is wrong or unavailable. The operator disclosure must identify applicable contacts and international-transfer arrangements.
Cookies and browser storage
hiddlo uses first-party login and CSRF cookies and a chosen-language preference. Creator drafts and remembered management links may remain in browser storage; remove them on shared devices. Respondent selections and submission credentials are kept in the current tab, not written to persistent browser storage. Accepting the Terms does not authorize analytics. When enabled, optional Google Analytics runs only on the homepage, public guides and template library after a separate opt-in. Google receives public page views, browser/device information and network information needed to receive those requests, and sets analytics cookies. We do not load it on respondent, withdrawal, editor, results, account or administration pages. We do not send survey answers, questionnaire content, creator identity, query strings or fragments to analytics. Advertising features and Google signals are disabled. The choice and analytics cookies last up to 180 days. Use Analytics preferences on an eligible public page to decline or withdraw consent; this removes analytics cookies and stops future collection in this browser, but does not erase data already received by Google. Browser privacy signals disable collection. Google processing locations, retention and provider arrangements must be covered by the operator disclosure.
Feedback reminders store only a next-prompt time and a reminder opt-out preference in your browser. They contain no account identifier, survey data or feedback text. Reminders appear on eligible signed-in pages initially and at most every three days; sending feedback pauses them for 30 days. You can choose “Don't ask again” while keeping access to the feedback link. Clearing site data resets these preferences, and another browser has its own preferences.
Limits of these choices
Your Terms agreement does not waive privacy rights or authorize unrelated processing. Consent must be freely given and specific; coercive participation, employment power imbalances and special-category data may need additional legal assessment. Consent records document the choice presented; they do not certify GDPR compliance. The operator must establish lawful grounds, service-provider agreements, transfer safeguards, retention, security and rights-handling procedures before operating the live service.
Operator processing disclosure
Propect Works LLC uses Render for application hosting and PostgreSQL storage in Virginia, United States. On the Hobby workspace, Render retains application logs for seven days and provides a three-day point-in-time database recovery window. Any logical database exports created through Render are retained there for seven days. Deleting information from the live service does not immediately erase provider backups.
We use Resend to deliver account and invitation email through its United States sending region. Resend processes recipient addresses, message content and delivery information, with 30-day email data retention on our plan. These messages do not contain survey responses. Mail you send to admin@strudl.io is handled through Porkbun's hosted email service; keep individual answers, private survey links and sign-in codes out of support messages. We retain support correspondence as needed to resolve and document the request and meet applicable legal obligations. Provider security, billing and legally required records follow the providers' own policies and may have different retention periods.
We process account information to provide the service you request, operational security information for our legitimate interest in preventing misuse and protecting the service, and records required by applicable legal obligations. Survey participation uses the separate consent described in this notice; creators remain responsible for the purposes and use of their surveys. Render and Resend publish data-processing addenda incorporating Standard Contractual Clauses and UK transfer provisions for relevant international transfers. Provider processing and support may take place in the United States and other countries identified in their subprocessor disclosures.
Send privacy, account, security and other Strudl requests to admin@strudl.io. Describe the request without including individual answers or access credentials. We may request proportionate evidence of account control before making account changes. For reported answers, use your private withdrawal link or contact the survey creator about their exported copies. We respond under the deadlines and rights applicable to the request. Contact us for information about provider safeguards or to raise a concern.
Document identifier: 98727211196e4ca2d1b48ca845701774768d403734d5e4dcae30a390b13eb118