Please wait while page data are computed.
Anonymous Doodlefree service
--------- Africa ---------
-------- America ---------
------- Antarctica -------
--------- Arctic ---------
---------- Asia ----------
-------- Atlantic --------
------- Australia --------
--------- Europe ---------
--------- Indian ---------
-------- Pacific ---------
- Translation & time zones
- Re-sending emails
- Secured connexions
- Weighted votes
History:24 Dec 2016: V 2.7
5 Sep 2011: Version 2
8 Dec 2010: Version 1
15 Nov 2010: β test
30 Oct 2010: α version
ADoodle is a simple service for you to organize an anonymous survey or vote among your colleagues or friends. If you have already used Make a choice feature at Doodle.com then you may consider ADoodle.org as an Anonymous version.
ADoodle.org is a free and secured service without any registration. Simply set up a vote with a list of choices and emails and let the participants express themselves freely and anonymously.
24 Dec 2016: 00:38 A significant update of ADoodle.org core has been carried out. Language and time zone managament have been added. Despite thorough tests have been performed, please report any anomalies.
11 May 2016: 18:15 A hardware disk error has occured on the vote machine for one file. One vote has been invalidated. The service has been unavailable for half an hour. The developper can only apologize for the inconvenience. Please contact the webmaster if you need more information.
21 Oct 2015: Beware! Today between 23:00 and 23:59 (local Paris) the service will be unavailable.See the technical reasons here.
14 Jul 2015: Support will be unavailable 15-22 August 2015
11 Jun 2015: 13:00-13:30 (local Paris) ADoodle.org server experienced a major crash. 5 ongoing surveys were invalidated due to damages to the vote files. The developper can only apologize for the inconvenience. The problem has been solved. The relevant participants are informed when connecting.
07 Oct 2014: ADoodle.org has been unavailable for 14 hours due to an equipement incident on the service provider infrastructure (technical information here). All our apologies about that, please contact the support in case of subsequent difficulties. The equipement has been replaced.
25 Sept 2014: After 'HeartBleed', 'Shellshock' is the new world wide super-bug reported on by Stéphane Chazelas. Bash is updated.
11 Apr 2014: ADoodle.org is unaffected by the recently identified worldwide so-called "OpenSSL Heartbleed Bug". Verify that
It is a good practice to have a look - first - at the recommendations to vote creators in the Help tab.
Title of the vote/survey
This will be the subject of the sent emails.
Creator of the vote
For the information to the participants.
Question which the choice(s) below must answer
The voters will select an answer corresponding to this question.
The voter can only choose one of the proposed choices.
→ If you want multiple choices with check boxes
Please give a list of emails (one for each line or in comma separated form or else).
The voter will receive an email containing a unique personal vote ticket and two links to vote and display the results of the vote. Naturally a voter can only vote once.
NB: All emails must exist and be valid and must not block emails from ADoodle.org (see FAQ & Help tab).
You may define weights for the voters by indicating a weight after each email address. Do not worry about the format, simply put a weight number (integer or floating point value) after the email. The weights will be extracted whether they are alone or in parenthesis or brackets or else.
For instance if you enter:
it means that there are three voters with vote weights of 2, 1.5 and 1 respectively. In this case the total weight is 2+1.5+1 = 4.5.
Anonymity considerations. If you choose to define weighted voters, the full anonymous character of the vote cannot be strictly guaranteed. See Help tab. In pratice, to increase anonymity, try to maximize the number of identical weights among the voters and to maximize integer ratio between the weights (e.g. weights such as 1, 2 and 3 or 0.25, 0.5, 0.75 etc).
Please give a list of emails.The observers will receive an email containing a link to display the results of the survey. An observer does not vote. If you organize the vote and do not vote, put your email here to follow the results.
Enter a list of email addresses
NB: All emails must exist and be valid and must not block emails from ADoodle.org (see FAQ & Help tab).
No dates are defined. Voting and observing the results will be possible at all times.If you want to limit vote duration and prevent disclosing the results during the vote period of time, please add date limits:
Please review carrefully the other parameters of your vote.A check mark means that the option is active, otherwise the option will not be applied.
By clicking on the following Previsualize button, the input data will be checked and the vote data will be previsualized.
To vote you will receive an email with the proper link.
You can also enter your vote identifier and personal vote ticket here:
To see the results of a vote you will receive an email with the proper link.
You can also copy and paste the vote identifier here:
Here is a demonstration of the vote creation steps.
1. Define the vote
2. Check the vote
3. Create the vote
5. See the results
The first step is defining the parameters of the survey/vote. Do not worry, if you forget something ADoodle.org will tell you what is needed when you go to the previsualization step.
Your main effort should be the email list, whatever its format. It is your responsibility, considering the participants, to provide a list of valid emails. Otherwise some participants may not receive the vote email. A good practice is first to invite the participants to a test survey.
The previsualization step checks that the vote parameters are correct. This step also helps you previsualize and check what kind of email will be received by the participants.
You can go back at any moment by pressing the "Previous step" button at the bottom of the page. Do not use the back button of your browser because the memory cache of the browser is deactivated for security reasons.
You may now confirm the vote creation. Once you press OK you cannot go back. The vote will be created and available at all times to the participants only. Note that a vote cannot be deleted.
After the emails have been sent, you can see a confirmation that all the emails have been correctly emitted.
It is important at this moment to close the page or your browser. If you happen to reload this page somehow, then a second identical vote will be created. You do not want that.
Here is typically what you will see when clicking on the vote link:
Once you have voted, the page confirms your vote and propose you to go to the result page.
Here is typically what you will see when clicking on the observer link, to observe the results of the survey/vote. Note that a textual (detailed) description is given for a clear analysis of the results.
As you see, ADoodle.org is fast and simple. Here are final recommendations:
Note that some other useful options are available like adding date limits, or defining weighted votes if really necessary.
Have a good anonymous vote.
Here are Frequently Asked Questions (FAQ). The definitions of the terms voter, observer, creator etc. are in the 'Help' tab.
1. What is ADoodle.org?
2. What are the founding principles?
3. What is anonymous?
4. How do I know that the vote is anonymous?
5. What is public?
6. What information is shared between the participant?
7. What is stored?
8. What is not stored?
9. How does it work?
10. Security considerations
14. Plan for future versions
15. What does ADoodle mean?
16. How do I contact the author of ADoodle.org?
ADoodle.org is a website to organize, in a very simple way, an anonymous survey or vote.
ADoodle.org is based on fairness, transparency, equality, full symmetry between the voters and the anonymous character of the cast vote.
- The cast vote is anonymous, not the list of potential voters and observers.
- The vote is even doubly anonymous. No one knows who has voted.* No one knows what a voter has voted.* The reason is that the vote machine only recognizes random personal vote tickets.
- Also internally, the vote machine do not know who has voted.* The reason is that the temporary relation between the personal vote ticket and the email is erased at the first connection of the voter, before the voter has even voted or not.
* Concerning anonymity please keep in mind 2 very general facts that are not specific to ADoodle.org. 1) Your active participation anonymity is lost if all the voters vote (in this case all the participant will know that you have voted) or if no one votes (all the participants will know that you have not voted). 2) Your vote anonymity is also lost if all the voters vote and vote for the same choice.
- Each voter receives an email with a personal vote ticket. The personal vote ticket is a random number that does not contain any information on the email.
- The server itself erases the relation between the email and the personal vote ticket as soon as a voter connexion occurs after a vote has started. The email lists are also completely erased after the end of the vote.
- With this procedure one can vote anonymously, from the vote creator side, from the other participant sides, even from the vote machine side.
- There is no public information about a created survey. Only the voters and the observers receive information about the vote they belong to. So the question is actually: what information is available within the participant group?
- All the participants share the same information about a created survey: voter and observer lists, title, question, choices, dates etc.
- The vote creator does not have more or less information than any other participants. S/He is simply the person who creates the survey. The vote creator does not have special powers.
- Since the email list of voters is received by all the participants, each involved participant can control the conformity of the list with what has been announced by or agreed with the vote creator.
- The list of observers is also transmitted to all the participants. The observers are the group of people who do not vote but get the link to the result page as well.
- The voting tickets (random numbers) are stored on permanent files.
- Emails are only temporarily and partially stored, elsewhere, until the end of the vote. The relation between the personal vote ticket and the voter is erased as soon as possible, at the first connection to the website, before any vote operation from the voter. All emails whatsoever are completely deleted after the vote end.
- An observer typical email, such as the one sent to the observer(s), is sent to the webmaster for statistical purposes and minimum support, as well as with connections to the website.
- As soon as a voter connects to the website the email relation with the random ticket is first erased. After the end of the vote, all the remaining email lists whatsoever are deleted from the vote files. As a result the email list ends to be only available in the sent emails and known from the addressees, and not stored on the server.
- One could argue that the list of emails may be kept stored in some uncontrolled system disk or memory cache or system log file but 1) this is out of any user reach anyway 2) in any case the relation between the emails and the personal vote tickets is deleted.
- Personal vote tickets are created randomly from a seed provided by date and time measured down the microsecond when the creator creates the vote. Sophisticated pseudo-random generator is used, cryptographically graded. It is therefore virtually impossible to predict the value of this key and the values of the unique tickets sent to the voters. The machine has no knowledge of relation between a voter email and a personal vote ticket when the vote occurs. The machine no longer knows what are the email origin of the vote anonymous tickets.
- The personal vote ticket is basically a unique large binary random number like 2c9586f8ac66be373ef6e5041e965224 in hexadecimal format. This number is chosen so that it cannot be easily guessed by anyone, even a computer (see strength limits and security considerations below).
- Beware: if one person appears in the created voter list twice with two different emails, then this unique physical person will be allowed to vote twice. To counterstrike that, the email list is transmitted to every participant with their voting tickets. So everyone can check that the list is ok. The person creating the vote must take care to provide only one email for each participating real person. Note that the vote machine checks email lists for obvious duplications and wrong email addresses but only in their Domain Name Server after the @ sign.
When you cast your vote, it goes through an encrypted secured channel (technically https://...) and no-one in between can see what your vote is. Since the vote machine has no knowledge of the voter identity at vote time and after, and only counts cast votes, your cast choice and choice related identity are rather well protected.
Your participation now is as anonymously strong as the security on email traffic is. If someone gets access to your email, s/he could see that your are involved in a specific survey. Using your personal vote ticket, s/he could see either that you have voted or that you have not voted (but s/he could not tell what you have voted). Or s/he could vote instead of you using your vote random ticket. In this case if you try to vote after the "spy" did, you will not be permitted to do so and therefore you will realize that something has gone wrong.
Your internet browser may keep some vote or result links in its browsing history. However these links do not contain any identity information. One can vote only once. In the vote machine, the relation with the email is deleted at first connection after the vote start date and all the emails and remaining relations deleted after the end date.
So if you think that reasonably no one will look at your emails, then your can participate with good trust.
If you think that someone may listen to your email traffic, such as a computer-skilled colleague or the computer administrator of your network, AND may be ill-intentioned then you should not use this website. If you think some unwanted person is liable to observe your email traffic, do not use this vote mechanism. This person could vote instead of you. If you do not trust the webmaster (see contact at last question), do not use this website.
This website has been made so that small more or less formal organisations (such as a group of well-intentioned co-workers, scientists in the case of the webmaster, or friends) can organise quickly a convenient electronic vote. The website gives anonymity to probe voters' overall opinions without going through an "every-one-knows" or "I know nothing" doodle procedure. The vote mechanism is both simple and anonymous.
Your vote will always be cast anonymously. If you think that reasonably no one will look at your emails, then your can participate with good trust.
- The vote creator is informed of the success of the vote creation and of each email emission. This is controlled by the vote creation mechanism.
- If a technical problem occurs during email emission (e.g. overload), the vote is immediately invalidated. No one will be able to vote. The participant will be informed, directly on the result page, that the vote is not available.
- If a participant does not receive the email, it can be re-sent only if the personal vote ticket has never been used to connect to vote machine and only before the end of the vote.
- Email emission is tested for success (or failure). Email transmission is based on the robustness of email communications through the internet (which is pretty good). However if a participant is behind a server/firewall that purposely blocks ADoodle.org emails, the participant will not see that a vote has been created. Because the distant email servers do not always tell that they block emails or not, there is no definite way of knowing that the email did not arrive at destination. Even if they do tell, ADoodle.org does not detect bounce emails. It is therefore a good practice, for the vote creator, to test and to inform the participants that they should expect an email from: firstname.lastname@example.org and that they should react if they do not receive it. These emails are not spam.
- See "Security considerations" question for attack scenarii.
Note: Small cosmetic changes do not increase version number.
In a future version, ADoodle.org will implement a mechanism to detect bounce or incorrect or unresponsive email addresses.
Also compliance with accessibility (see e.g. http://wave.webaim.org) will be improved.
ADoodle is simply the "Doodle" word with a first capital letter meaning Anonymous. ADoodle.org lets you set up a vote or poll or survey which is anonymous for the participants. doodle.com is a famous website used to organize meetings or to make a choice. In the latter case, the participants must expose their choice to everybody else or let one person control the result page. ADoodle.org let you organize an anonymous vote among your colleagues or friends with maximum transparency, full symmetry between the participants, and reasonable anonymity in the vote and participation in the vote.
Questions, opinions, suggestions, criticisms or encouragements are much welcomed. The webmaster can be contacted at adoodle[at]sebsauvage.com. Please replace [at] by the @ character. My job is scientific researcher in Physics in a laboratory which requires some anonymous probing of opinions. Hence this website.
If you do not find answers to your problem here, please contact the assistance: email at the bottom of the page.
1. Get quick help
2. Recommendations to the vote creators
3. Recommendations to the participants
4. Suggestions to all
5. Vote mechanism
6. Weighted votes
The best way to understand how ADoodle.org works is to see it in action. For a start try to create a vote using your own email address in the voter list, or possibly several of your own addresses.
Please first have a look in your spam folder and at the recommendations to the participants below.
If you have not received the voter/observer email, or if you have lost it, or deleted it, please below ask the vote machine to attempt to re-send it. Re-sending is possible as long as the email has not be used to connect to the vote page and as long as the vote has not ended and only for surveys created after 1st July 2016.
Your email :
NB: Whatever the entered email, this process will not disclose any information. An information summary email is always sent when clicking 'Re-send'.
In the received email, click on the vote link to connect to the vote page. The vote machine will tell you if your personal vote ticket has already been used to vote or not.
Check , warn and test:
If you do not receive ADoodle.org emails, configure and look into your spam folder.
Please note that re-sending an email is possible (see the top this tab) as long as the email has not be used to connect to the vote page and as long as the vote has not ended.
In case of any difficulty or questions, please contact the support at contact[at]adoodle.org (replace [at] by the @ sign). You may also contact the developper at the address indicated at the end of the FAQ tab.
- Someone, called the creator, creates the survey by providing a title, his name (or pseudo), a question (or subject) and a list of possible choices.
S/He also provides a list of voters and possibly a list of observers(who do not vote).
All these people are referred to as the participants.
- All the participants share exactly the same information. ADoodle.org is based on fairness and equality. Everyone involved in the vote knows who are all the voter emails, who are the non-voting observer emails and can see the results of the survey. The vote creator - if s/he has included her/his email address in the list of voters or observers - does not know more or less than any other person involved in the survey.
- When creating the vote, a vote email is sent to each voter to vote and look at the results. An email is sent to each observer to look at the results, but not to vote (see figure).
- With the vote email to the voters comes two links. The first link enables to vote and should be kept secret, unless one wants to transfer its voting ability to someone else. The second link corresponds to the page of results. A priori it should not be distributed, unless the participant wants to expose the results to some other people, possibly once the vote period has ended.
- One voter (i.e. one email address) can vote only once.
- The vote machine has no knowledge of the physical identity of the voters. In particular the server, at voting time, has no knowledge of the email address of the voter.
- The vote machine keeps track of the number of voters, number of voters aware of the vote and counts the various vote choices. A voter is said to be aware of the vote if s/he has connected to the vote page, by clicking on the link received by email, but did not vote.
- The vote mechanism is the same for all voters. Note however that each voter can vote only once and can no longer vote after having voted. The voter can have knowledge of the results of the vote during the vote, if allowed by the vote creator, and at any time after the vote period of time.
- A voter can transfer his voting ability to any other person by transmitting the email s/he has received for the survey.
- The vote creator does not have special "powers" except the initial one to create a survey.
- First, in an usual vote one can say that the weight of each vote or voters is 1, because 1 person equals 1 vote. The total weight of the votes is the number of voters (or total number of votes depending on how the results are presented).
- In a vote with weighted votes, the vote creator gives an arbitrary weight to the vote of each voter (e.g. 2 or 0.1 or 10 etc). The results are constructed from the relative weight of each choice with respect to the total vote weight.
- Weighted votes are an easy way to probe the opinion of represented groups of people. Each group proposes one representative voter. You want each voter to have a weight corresponding to his/her group size. In this case weighted votes is a straightforward solution to get accurate representativity.
- Weighted votes may be useful in some cases such as in "Grands Électeurs" systems, but should be regarded as bad practice here because full anonymity cannot be guaranteed.
- If you choose to define weighted voters, beware the anonymous character of the vote may not be guaranteed. For instance if all the voters have a weight of 1 except one voter who has a weight of one million, it is obvious in this extreme case to see if the latter voter has voted and what he has voted. In practice anonymity can be good without being strict as in a non-weighted vote. Note that the participants will be informed of the weights of all the voters. In the case of a weighted vote, the participants will be informed that the anonymity cannot be guaranteed.
- If you set up weighted voters, try to maximize the number of identical weights and to maximize integer ratios between the weights. That will increase anonymity.