Privacy & Anonymity
Privacy & Anonymity Policy
Last updated June 2026
Field Panel runs surveys at different sensitivity levels. Before you answer, each survey states its anonymity tier in plain language. This page explains what those tiers mean and the rights you keep over your data.
The two protected tiers
Anonymous
No link to your identity and no demographics collected. There is nothing in the response that could be traced back to you — Aaron literally cannot tell who said what. You manage these responses with a receipt token only you hold.
Confidential
No link to your identity, but the survey collects demographics (such as sector or age band). Those details create some re-identification risk at small numbers, so results are generalized and protected by small-cell suppression. Also token-managed — never tied to your account.
A third tier, Identified, deliberately links responses to your account (for example, feedback on a specific class). You manage Identified responses by signing in. The tier is always shown before you answer.
Your key
The token system
Because anonymous and confidential responses are not linked to your account, the only way to manage one later is a token issued when you submit. Tokens are shown once, downloadable on your PDF receipt, never emailed, and unrecoverable by design — we cannot look one up for you, because being able to do so would rebuild the very link the anonymity model removes. Save it somewhere safe.
An honest nuance
Participation vs. content
For anonymous and confidential surveys, what you answered is unlinkable to you. But that you participated may be known — Aaron tracks completion (not content) to thank contributors, send reminders, and re-engage or retire inactive panelists. Content stays behind the wall; only the fact of participation is recorded against your account.
What you can do
Your data rights
View. See the full content of every response tied to your receipt token or account.
Withdraw. Exclude a response from future analysis without deleting the record.
Delete. Permanently remove a response. For anonymous and confidential surveys, your receipt token is the only key.
Manage your profile. Edit or delete your anonymous demographic profile with your profile token.
Results
How we protect results
Published and analyzed results show aggregates only, with generalized categories (age bands, not ages; regions, not cities). Any group with fewer than five respondents is hidden rather than shown, so no one can be singled out by combining small categories. Access to raw, unsuppressed rows is a deliberate, logged action.