Privacy policy

Last updated 14 October 2026

This page explains what personal data SampleLabs collects, why, and what you can do about it. SampleLabs is run by SurveySwap B.V. in the Netherlands, which is responsible for your data. Questions? Email [email protected].

If you use SampleLabs to run a study

We collect:

  • Your name, email address and password (stored scrambled) when you make an account.
  • The surveys you build, their settings, and the responses they collect.
  • Your orders. Payments go through Stripe; we never see or store your full card number.
  • What you tell us in a request to our Agency team, and the call you book through Calendly.

We use this to run the service, take payment, deliver your responses, answer your questions and keep the service safe. Before you make an account, your surveys and orders are linked to a cookie in your browser so you don't lose them.

If you answer a survey on SampleLabs

The researcher who made the survey decides what it asks and what happens to your answers. They are responsible for those answers; we store and process them for the researcher. To protect the study from bots and fake answers, we also record:

  • Your answers, and how long each page took.
  • How the mouse, touch and keyboard were used (for example where clicks landed and the timing between keys), not what you typed elsewhere.
  • A replay of the survey page while you answered it, if the researcher turned that on. Replays are deleted after 30 days.
  • Your browser name, rough location (country), and a shortened network address. We keep a scrambled version of your IP address, not the address itself.
  • The results of Cloudflare Turnstile and Google reCAPTCHA, two services that check whether a visitor is a person.

Our page How we check for AI explains each check. If you joined through our participant panel, the panel shares a participant ID with us so you can be paid; we don't receive your name or email.

We also use these measures, without any answer text and with IDs scrambled, to study how bots behave in surveys and to improve our checks.

Who we share data with

We only share what each service needs to do its job:

  • Hetzner (Germany): the servers SampleLabs runs on.
  • Cloudflare and Google reCAPTCHA: checking that visitors are people.
  • Stripe: payments.
  • Our participant panel partner: finding participants for the studies you order.
  • Resend: sending our emails.
  • Calendly: booking calls with our team.
  • Anthropic: translating surveys, when you ask for a translation.

We don't sell personal data, and we don't use it for advertising.

How long we keep it

Account data stays while you have an account. Surveys and responses stay until you delete them or your account. Session replays are deleted after 30 days. Payment records are kept for seven years, as Dutch tax law requires.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it. Email [email protected] and we'll answer within a month. If you answered someone's survey, we'll pass your request to the researcher who ran it. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Cookies

We use cookies to keep you signed in, to remember surveys you made before signing up, and for the bot checks above. We don't use advertising cookies.

Changes

If we change this policy, we'll update the date at the top. For big changes we'll email account holders first.