Privacy, in plain words

Your answers and the team survey

The short version: the survey never asks for your name, nothing is sent to Loom, and your answers are locked (encrypted) in your browser so that only your consultant can read them.

While you answer

Your answers are saved in this browser so you can come back later. Nothing is sent anywhere while you answer. "Remove my answers from this browser" deletes them.

Cloudflare Web Analytics is optional on this site. When it is enabled, it counts visits without cookies.

Locked before they leave your browser

Your survey link carries your consultant's public encryption key. When you finish, your browser locks your answers with that key before you can download or copy them. Only the matching private key, which stays on your consultant's computer, can unlock them. Anyone else who sees the file, including your email or chat provider and Loom, sees only scrambled text.

Technically: an ECDH P-256 key agreement with a one-time key, HKDF-SHA-256 and AES-256-GCM, all done by your browser's built-in Web Crypto.

What you send, and to whom

At the end you can download a small locked file or copy a locked code. You send it to the consultant who shared the survey, by email or chat. Inside the lock:

• your role (for example Design);
• the team label you typed, if any (the survey refuses email addresses and phone numbers there);
• one answer code per statement;
• a random number used only to notice the same file sent twice.

Outside the lock are only the survey name and an identifier for the key it was locked with. The file does not contain your name, email address, free text or device details. Survey answers are never added to Loom's health check contact list.

How answers are shown

Your consultant combines answers by role (design, engineering, product) to show where the team agrees and where it doesn't. Results show group averages, never individual answers, and never a group of fewer than 5 people on its own. Roles with fewer than 5 respondents are merged into one combined group; if that group is still under 5, its answers are counted but not shown.

Where answers are kept

On the consultant's computer, in the project folder for your organisation, outside any shared code repository, still locked. They are unlocked only in memory when the consultant looks at the results. Ask your consultant to delete your file at any time.

Draft, last updated 25 October 2026 (answers encrypted; minimum group of 5).