Your file stays on your device
The export is opened in your browser. Parts the study never collects are dropped before you even see them.
DataDonate · a short tour
Your activity. Your choice.
Review your study-approved app activity, remove individual records, then choose whether to donate.
Synthetic data · no uploads · unpaid participation
Review first. Donate second.
On your device
Open your exportThe original stays on your device
You
Review and chooseRemove records before confirming
You
On the research server
Check and storeOnly the reviewed donation
Server
Links and search words may identify people. A participant code does not make a donation anonymous.
How it works & privacy
This offline tour illustrates the product. It does not test a live server, encryption or storage.
You see exactly what is sent
The list you review is the same data that is uploaded. The server double-checks that nothing changed on the way.
Study rules are locked
What a study may collect, how long it keeps data and how it deletes it are published once. Changing them means asking you again.
Studies are walled off
Project-scoped access keeps participant records and donations separate between studies on the same website.
A code is not anonymity
Access uses a private link and participant code. Donated links and Facebook search words may still identify people or reveal sensitive information, including private-group activity.
Deleting takes two people
Withdrawing cuts off access at once. Erasing the data needs one staff member to propose it and a different one to approve it.
Exactly what this study collects
Software support → study approval → your review. All approved fields and dates are included when present, unless you remove the whole record.
TikTok, YouTube, Instagram and Facebook are all required in Round 2.
2 · As a participant
Four steps, start to finish
Try the four-step flow with synthetic data. Nothing is uploaded.
datadonate.example/p/social-media-data-donation/join
Next: after you donate
Continue
3 · After you donate
Check. Store. Send a receipt.
Press Play to follow a donation. Offline simulation: no upload, storage or real receipt.
See all 11 server steps
Simulated server log
Donation details
Verification checklist
Next: the research team
Continue
4 · Research team
One place to run every study
Explore a fictional study dashboard. All changes stay in this demo.
Next: where the data goes
Continue
5 · Where data goes
Your export stays with you.
Only the reviewed donation leaves your device. Product illustration; no live infrastructure in this demo.
Your device
Open, filter and review.
Raw export stays hereResearch server
Verify rules and reviewed data.
Accept or rejectSecure storage
Keep the accepted donation.
Encrypted, study-scopedA code is not anonymity: approved links and search words can still identify people.
Detailed architecture & upload path
Access, study rules & privacy
Studies are walled off
- Every record is tagged with its study. The database refuses links between studies.
- A private link only works for the study it was made for.
- A wrong link and an expired link get the same plain error, so nothing leaks.
Rules cannot change quietly
- What a study collects, how long it keeps data, how it deletes it and how it pays are published together as one locked version.
- Every request re-checks that the version is still the same one.
- Changing any of those terms creates a new version and asks participants again.
A code, not a name
- Participants join through a private link. No account, no password.
- Sessions are short-lived and checked on every request.
- An optional email for reminders is stored apart and never becomes research data.
From invitation to deletion
Every date comes from the study's published rules.
- 1InvitedA private link, shown once to the research team and sent to the participant
- 2ConsentedRead the consent and scope notice, then agree. Tied to this version of the study
- 3Ready to donateOne donation per service, per round
- 4DonatedChecked, locked away, receipt issued
- 5Withdrawn (optional)Access ends at once; the deletion clock starts
- 6Time to deleteThe schedule in the study's rules comes due
- 7DeletedProposed by one person, approved by another, recorded
Try another view