Product · Distribution & control
Get it out there. Keep control.
A signed public link, downloadable QR, embeds, and named collectors send your survey anywhere. Password, scheduled close, response caps, per-device limits and a captcha decide who responds and for how long. The guardrails are on by default.
The public link
A link that expires itself the moment you republish.
The public link is HMAC-SHA256 signed and carries a version number. When you edit and republish, the version bumps and old links stop serving. You never chase down stale copies.
- On publishRotated
The link is signed
Publishing mints /s/<token> and signs it with HMAC-SHA256. Anyone can open it, no account needed. The signature travels in the URL, so a tampered link is rejected on arrival.
- On republishLive
Edit, and the version bumps
Change the survey and republish: the version increments and a fresh signature is minted. The new link is live; every v1 link that was already out there stops working. No stale copy lingers.
- A leaked v1 linkRejected
An old link is refused
Someone reshares the old v1 URL. The signature no longer matches the current version, so the server refuses it and shows a localized unavailable screen instead of leaking the questions.
Kiosk mode
Leave it on a tablet, and it runs itself.
Any published survey becomes a self-service kiosk at /k/<slug>: on an iPad on a stand, the survey loops respondent after respondent. Built for events, stores and front desks.
- Continuous loopAfter the thank-you, the survey returns to the first question on its own, ready for the next person. No cover page: it opens straight on the question.
- The language resetsIf someone answers in another language, the kiosk returns to the default language for the next respondent.
- Staff exit PINOptional. The PIN is stored hashed on the server and protects the exit control within the survey.
- Multiple devices per kioskThe same kiosk runs on several tablets at once, and they all collect for the same survey.
Offline collection
No signal, responses wait and delivery is retried.
If the survey is already open on the device and the connection drops, responses wait in a local outbox. With the page open, delivery is retried when connectivity returns. Opening the survey for the first time requires a connection.
- resp_0231
- resp_0232
- resp_0233
Retries avoid duplicate responses. Delivery can be rejected if the survey has closed or reached its limit.
Multilingual
One survey, many languages, a single link.
The same link speaks each person's language. The survey is offered in several languages at once and the respondent picks theirs with one tap (the globe pill, top right). No stray links, no copies to keep in sync.
camaleonic.app/s/q2-2026?lang=es
The language is detected for you: ?lang=, then the saved draft, then the browser, and otherwise the base language.
¿Recomendarías Camaleonic a un colega?
Translation editor
Progress per language
- Español
- English
- Deutsch
- Français
- Português
- Italiano
- Auto
- Hand-edited
- Imported
Auto-translation never overwrites what you edit by hand, and only touches what is visible: never the internal option values.
- 6
- languages in the dashboard, native-speaker reviewed
- 1
- link for every language of the survey
- 0
- € to translate: free automatic translation, built in
Free automatic translation, built in.
Control zone
You decide who responds, and for how long.
Five guardrails buyers ask about first. Tap one to read exactly how it behaves. You can switch them on and off right here.
Password
- Storage
- scrypt hash, compared in constant time, never returned to the client
- Session
- HMAC token cookie that expires daily
- Fail mode
- fail-closed: questions are blanked server-side if the cookie is missing
- Anti brute-force
- per-IP limit (5 / 60s) plus a per-survey lockout
Per-device limit (one response per device) and open/close scheduling with its own timezone per survey. Every response carries an ownership token to prove edits and uploads belong to it. Public surfaces are not indexable (noindex, nofollow).
And when responses land: a live control center
The shareable /r/ results dashboard reads live and now also drives: filter, compare, present, and dress the panel in your brand.
- Interactive filtersclick any chart and the whole dashboard filters
- Segments and cross-tabscompare segments side by side
- Individual responsesone-by-one reading, strictly read-only
- Presentation modefullscreen, driven from the keyboard
- Question curationyou decide which questions appear
- Period pickernarrow the dashboard to the dates that matter
- Brand themingthe survey's color and logo across the whole dashboard
Email invitations
Invite by email, and track every step person by person.
Send through Resend to up to 500 addresses, with an optional message and a personalized invite link. Each recipient is tracked on its own: sent, opened, clicked, responded and unsubscribed, with their rates.
- Sentpersonalized invite link each0Sent: 480 (100% of sent)
- Openedbot-safe tracking pixel0Opened: 366 (76% of sent)
- Clickedthe invite link was followed0Clicked: 241 (50% of sent)
- Respondeda response was submitted0Responded: 178 (37% of sent)
- Unsubscribedopted out, recorded0Unsubscribed: 6 (1% of sent)
Ship it
One console sends it out and keeps it under control
Signed link, QR, embed, named collectors and email invitations on one side. Password, scheduled close, response caps, per-device limits and a captcha on the other. All live today.
Public surfaces are not indexable, and every response carries its captured UTM tags.
Question 4 leads the answer a bit. Soften it before we publish?