39
submitted 1 day ago by trilobite@lemmy.ml to c/privacy@lemmy.ml

Hi, my employer is sponsoring an academic research on parenting and flexible working. A lot of sensitive questions are asked and the university researcher has circulated these questions on Google Forms to all employees. I am really anti-Google when it comes to privacy (got rid of every Google link years ago and currently use GOS, etc.) so I raised this concern with the HR team. They were sympathetic with my view and have encouraged me to send my view to the university. However, I don't want to go down the rant, and want to provide constructive feedback. So, first thought I would to consult with privacy focused members of this list. Here are my questions:

a) are there independent research papers out there that demonstrate (rather than speculate) that Google Forms is not fully respecting privacy and is not fully GDPR compliant?

b) are there more robust, privacy and GDPR compliant alternatives I could recommend? I've done quick searches on the web and alternatives like JotForm and AidaForm seem to be more privaci and GDPR focused. Anyone used these before?

Am I being too anal about this ...?

top 8 comments
sorted by: hot top controversial new old
[-] birdwing@lemmy.blahaj.zone 15 points 1 day ago* (last edited 1 day ago)

There's actually a surprising amount of poll makers that are out there, so there's a lotta choice.


The following satisfy these requirements in no particular order:

  • European (EU/EFTA, thus has to respect GDPR. National law, if prioritised above international, must not be more privacy-infringing.
  • Open source.
  • No tracking (or if there is tracking, it is fully anonymised).
  • Lets you build forms and surveys.
  • Must be platform-agnostic (allowing especially Linux) or be self-hostable.
  • Not AI-powered.

I've left costs out of the equation, since if there's no tracking (and thus no ad revenue), a form must be financed in a different way, be it through a price, non-profit institutions, restrictions on forms such as how long it can stay up, amount of questions/forms, etc.

Furthermore, I'm only going to list max. 1 per country and not stuff from cooperations that already are popular for other reasons. This is because I don't want to foster vendor- or country-lock-in dependence. So no Nextcloud (even though it's pretty good).


LimeSurvey ๐Ÿ‡ฉ๐Ÿ‡ช - what I've used. Pretty satisfied with it, has an intuitive form maker. It's pretty no-nonsense. Freemium, open-source. Can be self-hosted, on Linux.

CryptPad ๐Ÿ‡ซ๐Ÿ‡ท - also nice; can be self-hosted too. Freemium, open source (AGPL-3.0).

SurveyJS ๐Ÿ‡ช๐Ÿ‡ช - lets you use JavaScript to build forms. Freemium and self-hostable, MIT open source.

Vue Flow Form ๐Ÿ‡ญ๐Ÿ‡ท - has a pretty modern design, can be integrated on websites or apps. Free and self-hostable, MIT open source.

Zeroform ๐Ÿ‡ฆ๐Ÿ‡น - static and dynamic, not much to say. Forms can be exported as CSV, textfile, and JSON. For Linux too, self-hostable, free and open-source (AGPL-3.0).

PHP FormBuilder ๐Ÿ‡ง๐Ÿ‡ฌ - uses HTML. Free and open-source, self-hosted.

[-] turbodad@feddit.org 2 points 1 day ago

Which php formbuilder do you mean? There are dozens with this name ๐Ÿคฃ. Any chance you might share links to those projects?

[-] mas@feddit.fr 1 points 1 day ago

Why specify self hosted ? If it's open-source, it necessarily can be self-hosted

[-] mas@feddit.fr 1 points 1 day ago

Why specify self hosted ? If it's open-source, it can necessarily be self-hosted

[-] Baynd@feddit.org 11 points 1 day ago

Hi, it think you could check out these alternatives:

  • Cryptpad.fr (best alt., as far as I see it)
  • tally.so
  • bitpoll.de

Although I'm not sure about choice 2 or 3, choise 1 is best. You should check, if all functions you need are available.

[-] OhNoMoreLemmy@lemmy.ml 7 points 1 day ago* (last edited 1 day ago)

So this is pretty good.

https://measuredcollective.com/is-google-forms-gdpr-compliant/

It's a list of things you need to do in order to make the use of Google forms gdpr compliant.

One thing they don't touch on is the use of personal accounts to collect data. People tend to use Google forms because it's easy to set up using their personal account, but that essentially removes any company oversight from the collection and data processing. This makes it much harder to satisfy the data controller requirements.

Of course if it's an external contractor gathering the data and processing it independently, your company is likely to dismiss all this as not their problem.

If it's real academic research it will have had to go through ethics approval, and this should include data handling, and gdpr compliance.

[-] paf@jlai.lu 3 points 1 day ago

You can check framaforms from framasoft. https://framaforms.org/

[-] Dalde@lemmy.ml 1 points 1 day ago

Check out this open-source alternative. This article talks about Google Forms GDPR compliance. https://formbricks.com/google-forms-alternative-open-source

this post was submitted on 28 May 2026
39 points (100.0% liked)

Privacy

48828 readers
845 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago
MODERATORS