Anonymous Line
Ask a question and get anonymous replies from anyone — unreadable even to the server.
The question is encrypted here in your browser before it is sent, with the key traveling in the submission link's fragment (after the #). Each response is encrypted with a public key generated just for this form — only whoever holds the matching private key, which exists solely in the management link, can read it afterwards. The full mechanics are described in "How Anonymous Line works", below.
Shown to whoever responds as "[name] wants to hear your thoughts".
Only you see it, in the management console — useful to tell several open forms apart.
How Anonymous Line works
When you create the form, your browser generates two different keys and encrypts the question locally. The server keeps only the encrypted question and the expiration date — and returns TWO links: one to share with whoever will respond, another just for you to read the responses later. Each person who responds encrypts their own response with the public key you generated on creation — only the matching private key, which exists solely in the management link, can open it afterwards. Any number of people can respond, at any time, with no coordination between them.
Why two links, not one
Whoever responds must not be able to read the other responses afterwards (otherwise anyone intercepting the submission link would gain that same power), and whoever manages the form does not need the submission link. That is why the two roles travel on separate links with different powers — never mix them up, and never send the management link to someone who should only respond.
Why Nexinon cannot read the question or any response
The question uses the same zero-knowledge design as the rest of the family: the key lives in the submission link's fragment (after the #), which the browser never sends to any server. Each response uses public-key cryptography (ECDH): whoever responds encrypts with the form creator's public key, but only the matching private key — which exists solely in the management link's fragment — can decrypt it afterwards. At no point does the server hold a key capable of opening the question or any response.
Anonymity is for whoever responds, not a guarantee against resubmission
Without login, there is no way for Nexinon to truly prevent the same person from responding more than once — and we do not pretend otherwise. This browser stores a local reminder of "you already responded" to avoid an accidental resend, but it has no effect for someone using another browser, private browsing, or simply clearing the site's data. What is always genuinely guaranteed is that no response identifies who sent it.
Frequently asked questions
Secret Request collects ONE response from ONE specific person for ONE request. Anonymous Line collects an indeterminate number of responses, from anyone with the link, over time — built to hear a group (team retro, event feedback, anonymous suggestion), not a single person.
No — the server never receives any identity data about whoever responds, nor an IP address tied to the response itself. Each response is just an encrypted block with an arrival timestamp.
No. Without login, this is technically impossible to guarantee — and Anonymous Line does not pretend otherwise. The local flag in the respondent's browser is only a reminder against an accidental resend.
The responses become unrecoverable — by design, the server never held the private key that decrypts them, and it exists only in that link's fragment. There is no way for Nexinon to recover it for you. If this happens, delete the form (if you still have the submission link) and create a new one.
Yes — each form accepts up to 500 responses, a generous cap for real use cases, meant to limit abuse and storage cost. After that, the form automatically stops accepting new responses.
"Stop accepting responses" closes the door to new responses but keeps the ones that already arrived readable in the console — useful for someone who collected feedback up to a deadline and wants to close collection without losing anything. "Delete everything" is final: it removes the form and every response, forever, and cannot be undone.
Yes — the deadline you pick on creation ("Accepts responses until") only controls when the form stops taking new responses. From that point you still have a full 7 days to read everything at your own pace ("Reading guaranteed until"), regardless of whether the response deadline was 1 hour or 15 days. Only after those 7 days are the form and its responses deleted for good.
Not yet — Nexinon does not send e-mail or notifications in this version. Return to the management link and click "Refresh" to check manually.
Not in this version — each form has a single free-text question. A survey builder with multiple questions would be a different, larger tool, outside this one's scope.
Because it wouldn't make sense here: a passphrase works when you can agree on it with ONE person through a second channel. This link goes out to an entire group — the passphrase would have to travel through the same channel as the link (the same Slack/Teams post, for example), which wouldn't protect anything for real.
No — it is a courtesy from whoever creates the form (any text can be typed there), not an authenticated identity. Treat it like the sender of a greeting card: useful for context, not proof of origin.
It's just for you: a short text (e.g., "Sprint 24 Retro") shown in the management console, to tell several open forms apart. Whoever responds never sees it — it is encrypted with a key that exists only in your management link.
Nexinon Principles
Hybrid
Hybrid execution — part in your browser, part on the server; the page details what each side seesNo account needed
Use it now, no account or password.Free
No usage limits, no paid plan.Trustworthy content
Full explanation behind every tool, not just the result.