Privacy notice

The short version

When you answer a survey, we save your answer and your comment if you write one. We don’t ask for your name, email address or phone number, and you don’t need an account.

What we save

• The answer you tap, and the date and time you gave it.
• Your comment, if you write one. Please don’t include personal details about yourself or anyone else.
• A code that lets us accept one answer per device, per survey, per day. It is made from a random number kept on your device for 24 hours after you last answer: in a cookie, or, in a pop-up on a business’s website, in the pop-up’s own storage. It is not made from your IP address or from anything that describes your phone, and it is different for every survey, so it can’t be used to follow you around.

To keep surveys free of spam, we check answers and comments for signs that they were sent automatically. We may turn away answers that look automated, and mark comments that look like spam for the business to review. We keep only a count of answers turned away, never what was sent or who sent it.

The cookie

Our cookies page lists everything Tinysurv stores in browsers.

Answering a survey sets one cookie, called ts_device. It holds a random number, lasts 24 hours after your last answer, and is only used to stop repeat answers. It is not used for advertising or tracking, and it is not shared with anyone. Just looking at a survey sets no cookie.

If you answer in a pop-up on a business’s own website, a random number for that survey is kept in the pop-up’s storage instead of a cookie. It is only stored once you answer, and lasts 24 hours after your last answer to that survey. The address of the page you were on is saved with your answer (without anything after a “?” in it). The pop-up may also keep a small note in your browser, on their website, of when it was shown, closed or answered, so it doesn’t keep appearing. Unless the business chooses otherwise, it only keeps that note once you agree in their cookie tool, and never for more than 90 days.

What we don’t save

We don’t store your IP address with your answer, and we don’t use analytics or advertising trackers on survey pages. To slow down abuse, we keep a scrambled form of your IP address, separate from your answer, for up to a day. Like every website, the companies that host this service process IP addresses briefly to deliver pages and keep the service secure.

Nothing you type into the survey maker on our home page is sent to us until you sign up.

If you use “Report this survey”, what you choose and write is emailed to us so we can look into the survey. We don’t ask who you are, and we keep only the same scrambled form of your IP address, for up to a day, to stop the form being misused.

Who sees your answer

The business that asked the question sees your answer and comment, on their dashboard and, if they have them turned on, in summary and alert emails we send them through Resend. They decide what feedback to collect and how to use it, which makes them the data controller. Tinysurv runs the survey tool on their behalf, under our data processing agreement with them.

If a business shows its score publicly, your rating is included in the total. We never publish comments or individual answers.

How long it is kept

Until the business deletes the response, the survey or their account. They can delete any of these at any time. Copies in our backups are deleted as the backups are replaced, within about a month.

If you have a Tinysurv account

This part is for the businesses that create surveys. David Mitchell, who runs Tinysurv, is the data controller for it.

• We keep your email address, a scrambled form of your password (never the password itself), your timezone, your surveys and their responses, so we can run your account.
• If you sign in with Google, Google tells us your email address and an ID for your Google account, and we keep them to recognise you. If you turn on two-step verification or add a passkey, we keep what’s needed to check them (never your fingerprint or face). For each signed-in device we keep a short description, such as “Safari on iPhone”, and when it was last used, so you can see and sign out devices from your Account page.
• If you start a survey on our home page and press “Save my survey”, it stays in your browser until you create your account, and for no more than 7 days. We don’t receive it before then. Once your account exists it is saved as a draft survey like any other.
• When you choose a password, we check it against known leaked passwords using Have I Been Pwned’s Pwned Passwords service. Only the first five characters of a scrambled form of the password are sent, so neither the password nor who you are is shared.
• To stop bots creating accounts, the sign-up form may use Cloudflare Turnstile, a check that a person is filling it in. Usually you won’t notice it. Cloudflare, a US company, processes technical details about your browser and connection (such as your IP address) for this check only, under the same kind of safeguard as our hosting, and doesn’t use them for advertising. We only learn whether the check passed. We also ask new accounts to confirm their email address from a link before publishing a survey.
• We email you about your account: password resets, security alerts when your sign-in settings change, and notices when your plan is running out. On a paid plan we also send a weekly summary and low-rating alerts, which include your customers’ answers and comments; you can turn either off from the link in the email or your Account page. Emails are sent through Resend, a US company, under the same kind of safeguard as our hosting.
• Payments are handled by Paddle, our reseller and merchant of record. Paddle collects your card and billing details under its own privacy notice; we never see your card. Paddle tells us your plan, its status and your billing dates.
• The service is hosted by Fly.io, on servers in London, and a daily backup copy is kept with Tigris Data, through Fly.io. Both are US companies, so data may be accessed from or stored outside the UK; where it is, it’s covered by a safeguard UK law recognises, such as the UK–US data bridge or the UK’s international data transfer addendum.
• We keep your data until you delete your account, which you can do at any time from your Account page. Copies in our backups are deleted as the backups are replaced, within about a month. Paddle keeps payment records for as long as tax law requires.
• If you turn on a public score page (Pro), the business name, website and town you enter are public on that page, with your survey’s question, score and number of ratings. They stop showing when you turn it off; we keep the page’s address and a count of ratings you deleted while it was on, so the address isn’t taken by someone else straight away.
• If we act on your account, for example to help you log in or because it breaks our terms, we keep a record of what we did, when, why and your email address, even after the account is deleted, so we can show what happened.

Visitors to our website

We count visits to our public pages (not the pages inside an account, and not surveys) to understand how the site is used: pages viewed, where visitors came from, campaign tags in links, whether they’re on a phone, tablet or computer, and how many pressed “Save my survey” on the home page (not what they typed). To count each visitor once a day, we briefly scramble your IP address and browser type with a code that changes daily. Neither is stored, the scrambled version is deleted at the end of the day, and we keep only daily totals, for up to 25 months. Our own counting uses no cookies, shares nothing and stays on our own server. Our lawful basis is our legitimate interest in understanding and improving the site. You can switch it off on the cookies page, and visits from browsers that send a Global Privacy Control or Do Not Track signal are never counted.

Google Analytics. If you choose “Accept all” in our cookie banner, or switch Analytics on in Cookie settings, we also use Google Analytics on our public pages. It sets cookies to tell visits apart, and records the pages you view, how you found us, your device and browser, and your approximate location. Google doesn’t share your IP address with us, we don’t link any of this to an account, and it isn’t used for advertising. Our lawful basis is your consent, which you can withdraw at any time with the cookie button on any page; that also deletes Analytics’ cookies. Google LLC, a US company, processes this for us under its data processing terms and the UK–US data bridge. We keep it for 14 months. It never runs on customers’ surveys, website pop-ups or the pages inside an account.

Google’s tag loads on our public pages before you choose, using Google Consent Mode with cookies and advertising switched off until you agree. So even if you say no, your browser contacts Google, which receives your IP address and browser details, and the tag can send a cookieless record of the page view. Our lawful basis for this is our legitimate interest in measuring how the site is used without cookies.

If you contact us

When you use our contact form, we keep your name, your email address, what your message is about, the message itself and, if you’re signed in, which account sent it. We use them only to answer you, and the message is also emailed to us through Resend. Our lawful basis is our legitimate interest in replying to people who contact us. We delete the message 12 months after it arrives, or sooner if you ask. We don’t store your IP address: to stop the form being misused, we keep a scrambled form of it, and of your email address, for up to a day. The form may also use the Cloudflare Turnstile check described above. If you email us instead, your email stays in our inbox.

Your rights

You can ask for your answer to be deleted, or ask what is held. Because we don’t know who you are, tell the business roughly when you answered and what you wrote so they can find it. If you’re unhappy with how your data has been handled, you can complain to the Information Commissioner’s Office at ico.org.uk.

Who we are

Tinysurv is run by David Mitchell, a sole trader trading as Tinysurv. Postal address: Show postal address. Email: info@tinysurv.com. Registered with the Information Commissioner's Office, number ZC280077.