Google Forms is the gold standard, even for anonymous forms. But will they reveal your identity?
Learn how privacy in Forms works and never have doubts again.
Let's start with an important distinction: Signing into Google vs. being identified to a form owner.
In your day-to-day job, you are signed into your Google account in order to use Gmail or Chat. This happens via your browser. When you encounter a Google Form, you are still signed in. Unless you browse anonymously on purpose, this will always be active - but Google doesn't store (or pass on) your identity, more on this later.
Some features in Google Forms even require that you be signed into Google. Forms that only accept a single answer per person are a good example, or forms that are restricted to your company.
Being signed in to Google Forms also brings you features: It saves your partially completed forms to your account, so you can finish very long forms later (even on different devices). You need to know which account you're using for that. Hence, your account is displayed.
In short, when it says you@company.com (not shared) , you are signed in to Google for technical reasons. You are not identified to the form owner.
Now, the form owner can identify you if they want.
If a form identifies you, the very first question will be an email question. It can either be a checkbox to conveniently submit the email you are logged in with, or a free-text box to enter any email address. In any case, you are volunteering that information and cannot send the form without taking action.
(This is a welcome change. Earlier versions of Forms said that "your email address will be shared". Now you need to consent.)
Finally, people can insert questions such as "What's your first and last name" or "What's your employee number" and those would identify you too.
This question arises often. It makes me angry, because it betrays a lack of care in designing the questionnaire and testing the results. Only when others spent their time did the problem appear. The question also implies a belief that privacy measures are for show.
The answer is "no". The identity of respondents is not stored and cannot be revealed or added.
Now, in the case of something terrible happening (such as an information leak), all enterprise systems are monitored. Administrators get involved, network and forensics teams get involved, drink lots of coffee, get in a grumpy mood and get to the bottom of everything.
The specialists do not access a hidden "column" of email addresses, or access logs (form submissions are not logged). Instead, they would piece together evidence. ("Holger was online yesterday evening, around the time this was submitted.") Saving people the embarrassment of sending out another form does not trigger such an exercise, guaranteed.
It's under Settings > Responses > Collect Email addresses. The default is "Do not collect".
Go ahead and enable the features you need. A word of advice: Try to collect as little information as possible and stay away from identifying people if you can, even voluntarily. Whenever the words "it might be handy" creep into your head, stop yourself and remember your data privacy training. You will end up with less responses, may have to delete your data or worse.
Google Forms changed their display of privacy choices to be even more transparent. Knowing how to implement it makes it an essential tool for knowledge work processes. Make your next data collection more convenient by using Google Forms and by requiring less personal data. Thanks for reading!
Join 2100+ people who read these tips weekly. Subscribe now!