PS:

"jelo wrote: I'm against automatic restriction of saving referrer when activating anonymous mode.
In different environments other data (IP-adress, browser agent etc. ) could be used to identify people too. "

I don't think this is reasonable logic.
Just because it "might" be possible to join responses to respondants doesn't mean that LS should make it easy.
(particularly when the respondent is being told the responses are anonymised.

If there is a way outside LS to join the responses to respondants (ie information in the host log files that LS has no control over) then I don't see how the lawyers could make a case.
- but I'm not a lawyer!

-Graham-

In my example it's "just" a question of the referrer url so where's the problem of forcing this to "NO" when anonymised is "Yes" ?

-Graham-

Personnaly i think you are right : we must not allow saving referrer url when a sentence like this is shown «The record of your survey responses does not contain any identifying information about you, unless a specific survey question explicitly asked for it. »

It's totally false

I really think it's a major issue

I agree as well. The "anonymous" mode in LS should be as anonymous as possible within the software.

You can still create other "anonymous" surveys by internal processes. But the mode provided by Limesurvey needs to be as anonymous as possible and the case described above, bug or feature, is definitely a breach when it comes to anonymity.

One update:

I notice that in the survey responses (https://{survey_domain}/index.php?r=admin/responses/sa/browse/surveyid/{surveyID}) there is the startdate and datestamp.

Does this:


Contradict this:

( www.limesurvey.org/manual/Participant_settings )



Thanks,

-Graham-

This should be definitely NOT be the case for anonymous surveys.

Please make a bug report, if you are on the latest release.

Also, token based response persistence (see original topic post) should not be possible in anonymous surveys!
It isn't in 2.6.7-lts.

fvanderstarre wrote: Also, token based response persistence (see original topic post) should not be possible in anonymous surveys!
It isn't in 2.6.7-lts.

Are you sure ?????? :blink: :ohmy:

Sure about?
a) that 2.6.7-lts didn't had that issue
b) that LS3 has that issue

Hi Jelo,

a): Yes - see attached images (in Dutch... but you can see what happens I think)
b): No (I'm not using L.S. 3 yet)

@jelo : that LS2.6 (lts) have this issue

@fvanderstarre : maybe it can be checked : but did it work ?

@Denis: it works, 'Yes' reverts to 'No' when clicking OK. There is no column for 'token' in the response table for this survey. This is the correct behaviour!