End-to-end encrypted survey tool – Purplix.io

https://github.com/WardPearce/Purplix.io

by wardpearce • 3 years ago

3 1 3 years ago

wardpearce• 3 years ago

Purplix Survey is a free & open source survey tool what can't read your questions & answers.

With traditional surveys you are one data breach, one rouge employee or one government warrant away from all your user's data being exposed. Purplix uses modern encryption techniques to keep your user's data away from any actors.

How does it work? Questions, Descriptions & Title encryption When you create a survey, we encrypt your title, descriptions & questions with a secret key. This key is then stored encrypted in your keychain. When you share your survey with others using a link, the key is stored in the link for your participants. This ensures that your survey questions can only be read by your participants.

Answers encryption Every survey has its own unique key pair. The private key is securely stored in your keychain, while the public key is used by users to encrypt their answers. Only you have the means to decrypt the answers once they are submitted. When you share a survey, we include a hash of the public key in the URL to prevent main-in-the-middle attacks.

Preventing spam & multiple submissions Survey creators can opt-in to use VPN blocking, requiring a Purplix account or IP blocking. IP blocking works by storing a hash of the IP salted with a key not stored by Purplix, minimizing the attack surface of tracking submission locations, these IP hashes are only stored for 7 days or until the survey closes. Users will always be informed when any of these features are enabled.

Check out this example: https://purplix.io/s/651e32f0ab4897a99d28ea0e/CCpu5Nd8guMbuE...

Support us on GitHub: https://github.com/WardPearce/Purplix.io

End-to-end encrypted survey tool – Purplix.io

Related Stories