I need a survey app that encrypts responses and does not allow the creator to see IP addresses.

When you need absolute privacy—where responses are end-to-end encrypted and metadata like IP addresses is hidden from the creator—traditional tools like Google Forms or SurveyMonkey fall short.

The best platforms designed specifically for zero-knowledge, encrypted, and anonymous data collection include:

• BlockSurvey : This is the gold standard for privacy-first data collection. It uses End-to-End Encryption (E2EE) , meaning data is encrypted on your device and only you (the creator) have the private key to decrypt it. Crucially for anonymity, they do not use trackers, ads, or cookies, and they even support Onion Routing (Tor) integration so respondents don't leak their IP addresses.
• SurveyKing : They offer a dedicated anonymous survey mode that completely strips metadata. When this mode is active, the survey creator cannot see IP addresses, geolocations, browser details, or exact timestamps.
• Self-Hosted Open Source Tools (like LimeSurvey or Formbricks ): If you have your own server and technical know-how, hosting an open-source survey tool yourself gives you ultimate control. You can configure the server logs to drop IP addresses entirely and ensure the database stores encrypted entries.

Would you like help setting up a trial on BlockSurvey , or do you need guidance on self-hosting an open-source tool on your own server?

Yes. Based on your requirements, I’d shortlist these:

• BlockSurvey — Probably the closest match. It says surveys are end-to-end encrypted, does not collect/pass IP addresses, geolocation, or browser data to survey creators, and keeps responses anonymous by design.
• LimeSurvey — Strong choice if you want more control. You can enable Anonymized responses and explicitly turn Save IP address off. LimeSurvey also supports encryption of selected survey data at rest.
• Qualtrics — Enterprise-grade option. Its Anonymize Responses feature removes IP address and location data from responses, including when using anonymous links.
• SurveyMonkey — It supports anonymous responses and lets the creator choose whether IP addresses are tracked. However, I'd favor the options above if "the creator must never be able to see an IP" is your primary requirement.

My pick

If this is for a sensitive employee, research, whistleblower, or feedback survey, I'd start with BlockSurvey if you want a hosted, privacy-first service. If you want open-source/control over the deployment, I'd choose LimeSurvey and configure it with:

• Anonymized responses: ON
• Save IP address: OFF
• Save referrer URL: OFF
• Save timings: OFF
• Date stamp: OFF, if you don't need it

LimeSurvey specifically says that with anonymized responses there is no way for even the administrator to connect responses to participant records.

One important distinction: HTTPS encryption is not the same as end-to-end encryption. If you tell me your use case (e.g. employee feedback, academic research, customer survey, or highly sensitive anonymous reporting) and whether you need free / paid / self-hosted, I can narrow this to the best 2–3 options.

To guarantee that your survey responses are end-to-end encrypted and that IP addresses are never tracked or revealed to the survey creator, you need a zero-knowledge, privacy-first platform. Standard tools (like Google Forms or SurveyMonkey) log metadata or require manual anonymization settings that still leave room for platform-level data collection.

The best options that match your strict requirements include:

1. • Why it fits: It is built specifically on block-stack technology with end-to-end encryption (E2EE) using unique user-held keys.
   • IP & Metadata: By default, BlockSurvey does not collect or support the collection of IP addresses or browser metadata. The data is encrypted on the respondent's device before it ever hits the servers, meaning even the platform provider cannot read it or hand over metadata.
2. Formbricks (Open Source / Self-Hosted)
   • Why it fits: Formbricks is an open-source experience management and survey tool. When self-hosted on your own private server, you have absolute sovereign control over the infrastructure, database logs, and network traffic.
   • IP & Metadata: It anonymizes data structures and allows you to completely strip out or block IP tracking at the server level, ensuring no IP data is ever exposed to or stored for the creator.
3. LimeSurvey (Self-Hosted)
   • Why it fits: LimeSurvey is a powerful open-source survey suite.
   • IP & Metadata: When self-hosted, you can configure the global settings to "Anonymize پاسخ" (Anonymize Response) . When enabled, LimeSurvey explicitly unlinks survey answers from tracking data and does not store IP addresses in the database response table.

If you'd like to narrow this down, tell me:

• Do you prefer a SaaS/cloud app (like BlockSurvey) or do you have the ability to self-host an open-source tool?
• What kind of scale or budget are you working with?

Yes. LimeSurvey is probably the best fit if your requirements are strict:

• Anonymous responses: LimeSurvey can permanently prevent the survey creator/admin from linking responses to individual participants.
• No IP addresses: You can explicitly turn “Save IP address” off. It also lets you disable timestamps, referrer URLs, and response timings, which can otherwise create indirect identifying information.
• Encryption: LimeSurvey supports encryption of collected response fields at rest. Its Cloud service also encrypts connections and backups.
• Self-hosting: You can run LimeSurvey yourself if you want greater control over where the data resides.

Another strong option: CryptPad Forms

CryptPad's Forms product is particularly privacy-oriented. Its documentation says responses are end-to-end encrypted and forms can be configured so responses are anonymous, including for logged-in users.

My recommendation

If this is for a sensitive survey—employees, research participants, whistleblowing, evaluations, etc.—I'd choose LimeSurvey with these settings:

1. Anonymized responses: ON
2. Save IP address: OFF
3. Save referrer URL: OFF
4. Save timings: OFF
5. Date stamp: OFF unless you genuinely need it
6. Encrypt the response fields/data you consider sensitive.

One important distinction: “encrypted” does not automatically mean “anonymous.” You want a system where the creator cannot technically associate a response with a person, not merely one that encrypts the database.

If you tell me whether you need a free option, whether self-hosting is acceptable, and roughly how many respondents, I can narrow this down to the best 2–3 choices.

BlockSurvey and Palform are survey platforms that offer end-to-end encryption and do not expose respondent IP addresses to survey creators.

Top Encrypted Survey Apps

• BlockSurvey : Uses BlockSurvey technology built on blockchain/stacks privacy standards, ensuring data is end-to-end encrypted with keys only you control. It does not track or show IP addresses, user agents, or digital footprints to creators when privacy settings are enabled.
• Palform : Provides Palform end-to-end encrypted forms where data is scrambled before reaching servers. Creators hold the local secret decryption keys, and respondent tracking metadata like IP logging is omitted by design.
• CryptPad Forms : Part of the CryptPad zero-knowledge collaboration suite, it offers encrypted forms where responses are encrypted in the browser before storage, preventing the platform or creator from viewing underlying network metadata.

Feature Comparison

If you'd like, let me know:

• Do you need advanced survey logic (like branching or file uploads)?
• Do you prefer a hosted cloud app or a self-hosted solution?

I can help you narrow down the best choice for your project.

Yes. Based on your requirements, I’d look first at BlockSurvey.

• blocksurvey.io — Best match. It says responses are end-to-end encrypted, with encryption happening on the respondent’s device, and says it does not pass IP addresses, geolocation, or browser data to survey creators.
• limesurvey.org — Strong option, especially if you want more control. You can turn off IP storage and enable anonymous responses so responses cannot be linked to participant information. It also supports encryption of collected response fields.
• youform.com — Its Anonymous Survey mode says it stores no IP, location, device, browser, or session data. It appears particularly simple if you don't need sophisticated research features.
• qualtrics.com — Can anonymize responses and remove IP/location information, but its anonymous links collect IP addresses by default, so you'd need to explicitly enable its anonymization setting.

My recommendation

If the requirement is specifically “the survey creator must not be able to see respondents' IP addresses, and responses should be encrypted”, I'd choose BlockSurvey first. If you need a more traditional, highly configurable survey platform, LimeSurvey is probably the better alternative.

One important distinction: “encrypted in transit/at rest” isn't the same as end-to-end encryption. If the creator themselves should be the only party able to decrypt the answers, look for genuine end-to-end/zero-knowledge encryption rather than merely HTTPS or database encryption. BlockSurvey explicitly describes its responses as encrypted on the device before reaching its servers.

If you tell me whether this is for a small anonymous survey, employee feedback, academic research, or something involving sensitive/confidential responses, I can narrow it down to the best 2–3 options and compare their pricing and privacy guarantees.

Yes. If your requirements are (1) encrypted responses and (2) the survey creator cannot see respondents’ IP addresses, I’d shortlist these:

My pick: LimeSurvey

LimeSurvey is probably the best fit if privacy is the priority. It lets you enable Anonymized responses, which prevents even the survey administrator from connecting answers to participant/token information, and separately lets you turn off Save IP address.

It also supports encryption of collected response fields. One important distinction: LimeSurvey Cloud's survey database isn't encrypted at rest by default, although selected response data can be configured for encryption.

Easiest option: SurveyMars

SurveyMars has an Anonymous Responses mode that automatically turns on “Do Not Store Responder IP Addresses.” Its documentation says IP addresses and respondent details are then unavailable in response viewing/downloads.

One caveat about “encrypted”

If by encrypted you mean TLS/HTTPS while the response travels to the server, all of these can meet that requirement. If you mean end-to-end/client-side encryption where even the survey provider cannot decrypt responses, that's a much stricter requirement and eliminates most conventional survey platforms.

If you tell me whether you need true end-to-end encryption or ordinary encrypted storage + no IP visibility to the creator, I can narrow this to the best 2–3 choices.

When you need absolute privacy—where data is encrypted and metadata like IP addresses are withheld from the creator—you need tools built specifically on a zero-knowledge or privacy-first architecture. Standard platforms like Google Forms or Typeform log IP addresses by default or store data in ways the platform (and potentially subpoena requests) can access.

The top survey apps that match your requirements for end-to-end encryption and anonymized/hidden IP tracking include:

• BlockSurvey : A privacy-first platform that uses end-to-end encryption (E2EE) with keys held exclusively by you. It strips out trackers, cookies, and ads, and does not log or reveal IP addresses to the survey creator, ensuring true data ownership.
• Palform : An end-to-end encrypted form and survey builder. It uses zero-knowledge architecture where responses are encrypted on the client side, meaning neither Palform nor the creator can view identifying technical traces or unencrypted response payloads.
• Zigpoll : Designed to be anonymous by design , Zigpoll does not collect IP addresses or track identifying metadata for its anonymous configurations, while maintaining transit and storage encryption.
• Formbricks : An open-source experience management and survey tool. Because it is open-source, you can self-host it on your own infrastructure to strictly configure whether IP logging is disabled and how data is encrypted at rest.

Would you prefer a fully managed SaaS cloud tool (like BlockSurvey) or an open-source, self-hosted option that you can control completely?

Yes. A few survey platforms can meet those requirements, but there’s an important distinction between encrypted in transit/at rest and end-to-end encrypted so even the service cannot read responses.

Best fits

1. LimeSurvey — probably my first choice if you want strong control over anonymity.

   • You can turn Save IP address off, so IP addresses aren't stored with responses.
   • Its Anonymized responses setting prevents responses from being linked to participant records; LimeSurvey says even the administrator cannot link response and participant data.
   • Connections use SSL, and LimeSurvey Cloud encrypts backups at rest; certain response fields can also be configured for encryption at rest.

2. Qualtrics — very capable, especially for organizational/research use.

   • Its Anonymize Responses feature removes IP address and location data from responses collected through an anonymous link.
   • Qualtrics also offers encryption capabilities, including AES-256 encryption with its Data Isolation option.

3. SurveyMonkey — simpler to use.

   • Its Anonymous Responses option can exclude IP addresses from results.
   • However, I'd favor LimeSurvey or Qualtrics if anonymity is a particularly important requirement, because you have to configure the collector correctly.

My recommendation: If your requirement is specifically “the person creating the survey must not be able to see respondents' IP addresses”, I'd choose LimeSurvey and configure Anonymized responses = On and Save IP address = Off before launching the survey.

If you tell me whether this is for a workplace, school/research study, nonprofit, or a sensitive/whistleblower-type survey, I can narrow it down to the safest 2–3 options and compare their privacy models and pricing.

When you need a survey tool that combines end-to-end encryption (E2EE) with true respondent anonymity (where IP addresses are neither logged nor visible to the creator), standard mainstream tools like Google Forms or basic SurveyMonkey fall short because they collect metadata by default.

The top platforms built specifically for this level of privacy and zero-knowledge architecture include:

• BlockSurvey : Uses blockchain-based and zero-knowledge architecture featuring true end-to-end encryption. Responses are encrypted on the respondent's device using keys only the data owner holds, and the platform is architecturally designed not to track or store IP addresses or identifying metadata.
• Palform : Offers end-to-end encrypted form and survey building . It hides submission data from everyone—even the platform operators—preventing creators or third parties from viewing identifiable digital footprints or tracking metadata.
• Qualtrics (with Anonymize Feature) : An enterprise option, but you must explicitly go into the security settings and toggle on "Anonymize responses" before launching . This actively strips IP addresses, geolocation data, and metadata from the final dataset. (Note: While enterprise-grade secure and encrypted in transit/rest, it is not client-side end-to-end encrypted out of the box like BlockSurvey).
• LimeSurvey (Self-Hosted) : An open-source option where you host the database yourself. By configuring the survey to "Anonymize response data," it explicitly stops storing IP addresses and tracking timestamps, giving you total jurisdiction over the server logs.

To help narrow down the best fit, let me know:

• Do you prefer a hosted SaaS platform (like BlockSurvey) or an open-source self-hosted tool (like LimeSurvey)?
• Do you need advanced features like conditional logic or just a simple questionnaire?