Five pillars. Two are shipped and already running in production in our own response engine. Three -- the open self-serve signup, the full type registry, and live billing -- are in development. Each is marked honestly.
One authoring surface, aimed at any question type
The pitch is breadth: surveys, quizzes, polls, forms, assessments, intake, voting, RSVPs, applications, NPS, feedback, and waivers, all built on one registry of question types instead of a different tool for each. Today the engine underneath validates three foundational answer shapes -- open text, a 1-to-5 scale, and single-choice -- enforced by a database wall, not just a client-side check. The self-serve builder composes those shapes into the formats above; a scored quiz, a wider NPS scale, and a signature capture each need an answer shape the registry does not yet enforce, and we say so plainly rather than badge them available early.
North star -- 3 answer shapes shipped, full registry in development
Sign up, create, distribute, analyze
The whole loop lives in one place: sign up for early access, build a question or a whole set, share a link, and read what comes back in a response feed. Today the authoring and share-link-mint surface is founder-only and per-owner-able by design -- the founder-only posture lives in the UI gate, not the data model, which is exactly what lets a self-serve signup open the same surface to any creator without a reshape. That opening is what this page is pitching: it is being built, not shipped.
Founder-only today -- self-serve signup in development
A response engine with no identity column, by construction
There is no identity column in the response table at all -- no name, email, IP address, account, browser fingerprint, or session column. Not hidden, not masked, simply never created, so a future bug cannot fill in a column that does not exist. The stored submission time is coarsened to the hour before it is written, so even the moment of a response cannot be lined up against the moment a link went out to work out who answered. This is a real, provable property of the data model, backed by our own response engine, already proven in production, and the self-serve builder is being extended to expose the same option on every creator's own sets.
Shipped -- proven in production today
Moderation and abuse limits run before a response ever reaches your feed
Every incoming response passes a server-side moderation pass for likely foul language or spam before it lands anywhere -- a flagged response is labelled, never silently thrown away, so nothing disappears without a record. A salted, rotating rate limit bounds how many responses one source can send in a time window; the limiter key cannot be reversed back to a sender and is never written to the response table. Both checks are server-authoritative: neither can be skipped by a client, and both are already proven in production in our own response engine today.
Shipped -- server-authoritative, already running
Early access, honestly: no live signup, no live billing yet
There is no open public signup form on this page and no live checkout. Requesting early access takes an email address and nothing else; no card is charged today, and no pricing is committed to on this page. When self-serve signup and live billing are enabled, that will be a founder-gated decision announced plainly here, not a quiet flip.
Honest-off -- request early access, no card charged today