Improved survey privacy choices

[japsu]

Current model of hard anonymous / soft anonymous / name and email is not sufficient.

For each field, let the Survey Owner specify required/optional/not shared: (required/not shared is SHOULDHAVE, optional is NICETOHAVE):

• Colloquial name (first name*, last name and nick name)
• Official name (official first names, last name)
• Email address
• Phone number
• Age at the time of event
• Birthday (year, month and day)

Other fields needed?

In the answering view, show clearly which of the above fields are being shared.

For optional fields, present a check box, checked by default, that lets the user to opt out of sharing that field (same optional NICETOHAVE as above)

If birthday or official first names are missing and that field has been designated as required, prevent filling the form until those fields have been set in v1 profile.

If all of the above are designated as never, the form can also be designated soft or hard anonymous, which are equivalent to the current soft/hard anonymous options.

• Soft anonymous: connected to user account but identity not shared with survey owner, the user can view and edit their own responses
• Hard anonymous: not connected to user account, the user cannot view or edit their own responses

Relationship with registries & data processors

#587

[japsu]

As first step, this has been added to the survey view when legacy anonymity choice is NAME_AND_EMAIL: