Forms without footprints.
"id": "resp_9f3a...",
"encrypted_payload": "U2FsdGVkX1+mK9...",
"submitted_at": "2026-04-15T22:00:00Z",
// No IP. No identity. No trace.Most form builders are built to extract, not protect. They log IP addresses that can reveal a respondent’s location. Use device fingerprinting to re-identify anonymous users. Embed third-party trackers that monetize behavior. And store responses in plaintext, accessible to insiders or through legal requests.
Confide is a zero-knowledge form builder. We don't log IP addresses, fingerprint devices, or use third party tracking scripts. Responses are encrypted in the respondent's browser before they hit submit. We mathematically cannot access your data.
Your browser generates encryption keys. They stay on your device. We never see them.
The link contains a public key that lets anyone encrypt responses — but not decrypt them.
Their answers are encrypted in their browser before submission. We receive unreadable ciphertext.
You (and teammates you authorize) hold the private keys. Only you can decrypt responses.
If we get breached, hackers get encrypted gibberish. Your data stays safe.
If we're served a warrant for your data, we can only hand over encrypted blobs. We don't hold the keys. We can't decrypt on behalf of law enforcement.
Note: You can still be compelled to decrypt and share data you control.
Grant decryption access to trusted teammates. Each person gets their own secure keys — no shared passwords. Revoke access anytime without re-encrypting existing data.
They click your link, fill out the form, submit. That's it.
We don't log IP addresses, fingerprint devices, or embed tracking scripts. No cookies. No analytics. No third parties watching.
We don't record who submitted what, or when, or from where. Responses can't be traced back to individuals — even by you, unless you explicitly ask for identifying info.
We're transparent about what we collect:
We don't see:
Encryption happens in the browser. Your private key never touches our servers.
No IP addresses logged. No device fingerprinting. No way to tie a response to a person.
AGPL licensed. Read the code, audit the encryption, or self-host your own instance.
Rich field types — text, multiple choice, ratings, file uploads — with a clean drag-and-drop editor.
Guide respondents through accordion or paginated step layouts with progress indicators.
Deploy on your own infrastructure with Docker Compose in minutes. Own your stack end to end.
You get a one-time recovery code when you create an account. Store it somewhere safe (password manager, printed copy, secure note).
Without it, your data is permanently lost. We can't recover it. That the point.
No. We don't have a backdoor. We don't have a master key.
This is a feature, not a bug.
Revoke their access instantly. They lose the ability to decrypt new responses.
Note: They may have already downloaded past responses — manage team access carefully.
Your data is yours. Export encrypted backups anytime. Decrypt them locally using our open-source decryption tool.
You're never locked in.
Our encryption code is open source. Read it, audit it, run it yourself.
Try it yourself: inspect the network traffic. You'll see encrypted payloads, nothing else.
Free to start. Open to inspect.