Without looking at #BlockSurvey's source code, I am unable to tell if they really implement #e2ee. Is it #FOSS/#FLOSS?
On https://blocksurvey.io/ they write in bold letters: “BlockSurvey is a privacy-first platform. No ads, no trackers.”
The ad and tracking blocker I use (uBlock Origin) did find a tracker though: https://fa.blocksurvey.io/script.js
This Javascript file contains the code trackerUrl="https://cdn.usefathom.com/"
If you resolve this hostname from within Europe, you are directed to a server that seems to be located in the EU. However, the company that operates the #Fathom tracker has its headquarter in Canada: https://usefathom.com/imprint
This setup may comply with the #GDPR , but why are they lying about the tracker?
I would recommend using the Forms module of @cryptpad instead. This link sends you straight to the Forms module of @digitalcourage's #CryptPad instance: https://foorms.de
CryptPad is #e2ee and #FOSS/#FLOSS and does not contain any trackers.
#cryptpad #gdpr #fathom #foss #e2ee #blocksurvey