Anonymous survey design starts with a data inventory, not a checkbox

“Anonymous” is often implemented as a missing name field. That is a start, but it is not a design method. A survey can omit a name and still connect an answer to an account, invitation token, IP addre...