Privacy Notice
Version 2026-09-23.2 · Effective 2026-09-23
Operator and contact
Propect Works LLC
admin@strudl.ioWho handles your data
The Strudl operator identified on this page handles creator accounts, service security and operation. The survey creator (identified in the survey notice when supplied) decides why that survey is run and how its reported answers are used. Contact that controller about their survey and any exported copies. The legal roles and any necessary processing agreements must match the actual arrangement.
Information used to run Strudl
Optional creator accounts use a verified email address, single-use sign-in codes and login sessions. We process those to take steps you request and provide the account service. We receive survey questions and introductions, reported answers, submission progress, publication times and optional creator context. We keep records of the Terms and consent statements accepted. Service security uses short-lived keyed rate counters derived from network addresses; consent records do not store raw IP addresses, countries, user agents or browser fingerprints. Hosting and mail providers also process connection and delivery data under the arrangements described below.
Requests for test-site access
On the staging test site, you can provide an email and optional purpose, sector and organization for an administrator to review. No email is sent before approval. The request and its context are deleted from the live service 30 days after submission through scheduled maintenance. If approved, your email, approval time and approving administrator are kept separately on the allowed list until an administrator removes the approval. We use that list to send your approval notice and allow sign-in codes. Approval does not verify email ownership; a sign-in code does that. Removing approval stops future sign-in codes but does not close an existing account or sign out existing sessions. Contact the operator to request removal or account closure. Backup and provider retention follow the operator disclosure below.
Product feedback
Signed-in account holders can send product feedback directly to the Strudl operator. These messages are not randomized. We store the message, its category, an optional reply email you enter, submission time and review status. We do not automatically attach your account identity, survey links or answers. Please do not include individual answers, private links or sign-in codes. The operator uses feedback to improve the service and may use a supplied email to follow up. Feedback and its contact details are deleted from the live service 90 days after submission, regardless of review status, through scheduled maintenance. Security limits also use short-lived keyed account counters, stored separately from feedback. Provider backups follow the retention described below.
Reported answers and your choice
For protected questions, randomization happens on your device. Your original selection is not sent separately or saved. Ordinary questions are sent unchanged. This does not guarantee anonymity, particularly in small groups or identifiable surveys. Creators may provide their name, contact, purpose, retention and sensitive-data information, or skip these optional fields. Missing details are shown as not provided; Strudl does not verify those declarations. Before participating, review the questions and the information available. Your agreement to the Terms is separate from your consent to process reported answers. You can decline or stop; declining creates no submission.
Withdraw participation consent
After you begin, Strudl offers a private withdrawal link. Save it if you want to return later: we do not automatically store it on your device. Using its withdrawal button deletes that submission and its reported answers from the live service, including after the respondent link closes or expires. This changes live results. Withdrawal does not affect the lawfulness of prior processing. It cannot automatically remove copies already exported by the creator or immediately rewrite provider backups; contact the survey controller about those copies and retention. Without the private link we may be unable to identify your answers, and we do not collect additional respondent identity merely to reconstruct that link.
Storage and deletion
Respondent links close after 24 hours, but that is not a data-deletion deadline. The creator may state a purpose and retention criteria in the survey notice. If omitted, no creator deletion schedule has been provided. Creators must delete surveys when no longer needed and can do so from their management page. Survey deletion removes the live survey, submissions, reported answers and related assent records. Account records last while the account is maintained; contact the operator to request closure. Participation evidence lasts while the associated data is processed; after withdrawal, the remaining receipt contains no answers and is deleted after 90 days. Account and publication assent records last with the relevant account or survey. Expired codes, invitation requests, abuse counters and sessions are cleaned separately. Backup, provider-log and operational retention are specified in the operator disclosure below.
Privacy rights
Where applicable, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent for consent-based processing without affecting earlier lawful processing. Contact the operator or the survey controller as appropriate; you may complain to the relevant data-protection authority. GDPR applicability depends on the operator, targeting and processing circumstances, not solely your IP location or nationality. European/UK information remains available to everyone, including when country detection is wrong or unavailable. The operator disclosure must identify applicable contacts and international-transfer arrangements.
Cookies and browser storage
Strudl uses first-party login and CSRF cookies and a chosen-language preference. Creator drafts and remembered management links may remain in browser storage; remove them on shared devices. Respondent selections and submission credentials are kept in the current tab, not written to persistent browser storage. We do not add advertising or third-party analytics through this consent feature. Any future optional tracking requires a separate choice and notice before it runs; accepting these Terms does not authorize it.
Feedback reminders store only a next-prompt time and a reminder opt-out preference in your browser. They contain no account identifier, survey data or feedback text. Reminders appear on eligible signed-in pages initially and at most every three days; sending feedback pauses them for 30 days. You can choose “Don't ask again” while keeping access to the feedback link. Clearing site data resets these preferences, and another browser has its own preferences.
Limits of these choices
Your Terms agreement does not waive privacy rights or authorize unrelated processing. Consent must be freely given and specific; coercive participation, employment power imbalances and special-category data may need additional legal assessment. Consent records document the choice presented; they do not certify GDPR compliance. The operator must establish lawful grounds, service-provider agreements, transfer safeguards, retention, security and rights-handling procedures before operating the live service.
Operator processing disclosure
Propect Works LLC uses Render for application hosting and PostgreSQL storage in Virginia, United States. On the Hobby workspace, Render retains application logs for seven days and provides a three-day point-in-time database recovery window. Any logical database exports created through Render are retained there for seven days. Deleting information from the live service does not immediately erase provider backups.
We use Resend to deliver account and invitation email through its United States sending region. Resend processes recipient addresses, message content and delivery information, with 30-day email data retention on our plan. These messages do not contain survey responses. Mail you send to admin@strudl.io is handled through Porkbun's hosted email service; keep individual answers, private survey links and sign-in codes out of support messages. We retain support correspondence as needed to resolve and document the request and meet applicable legal obligations. Provider security, billing and legally required records follow the providers' own policies and may have different retention periods.
We process account information to provide the service you request, operational security information for our legitimate interest in preventing misuse and protecting the service, and records required by applicable legal obligations. Survey participation uses the separate consent described in this notice; creators remain responsible for the purposes and use of their surveys. Render and Resend publish data-processing addenda incorporating Standard Contractual Clauses and UK transfer provisions for relevant international transfers. Provider processing and support may take place in the United States and other countries identified in their subprocessor disclosures.
Send privacy, account, security and other Strudl requests to admin@strudl.io. Describe the request without including individual answers or access credentials. We may request proportionate evidence of account control before making account changes. For reported answers, use your private withdrawal link or contact the survey creator about their exported copies. We respond under the deadlines and rights applicable to the request. Contact us for information about provider safeguards or to raise a concern.
Document identifier: 5688d56e2e966e1c6315fef99b7e33b4ccf81bb42bcbfdd69cbfb978fd0552f3