ElectionChamp
Can election admins see how I voted?
No. Here is exactly what an election administrator can and cannot see in ElectionChamp.
No. ElectionChamp ballots are anonymous. Your vote is decoupled from your identity, and the administrator can see only whether you have voted, never what you chose. No setting overrides this. The voter list appears in random order, the status of the 5 most recent voters is hidden while voting is open, and every administrator action is recorded in a timestamped audit log.
What an election administrator can see
During a live election, the administrator works from a dashboard and a Voters tab. Here is what they can and cannot see.
| Visible to the administrator | Hidden from the administrator |
|---|---|
| Whether each voter has voted | Which candidate or option you chose |
| Totals: voters, votes cast, pending votes, time remaining | Any link between you and your ballot |
| Participation by hour | The voting status of the 5 most recent voters, while voting is open |
| Live totals, only if the Administrator results setting is on | Who wrote a ballot comment |
How anonymous ballots work
Your choices are decoupled from your identity. When you submit, your key is deactivated so no one can vote twice. Administrators can see that you voted, never what you voted for, and no setting can change that.
If a question has a comments box, comments are anonymous too. Leave out details that identify you if you want your comment to stay that way. Ballots are protected by AES-256 encryption at rest and SSL/TLS in transit; see secure voting.
- Open your voting link, or enter your 16-digit key.
- Make your choices and review them on the confirmation page.
- Submit. You get a confirmation ID by email, and the administrator sees only that you voted.
The full voter steps are in how to vote.
Random voter order and masking of recent voters
Two features stop anyone from working out a vote by watching the screen. The Voters tab lists voters in random order, not in the order they voted. And the voting status of the 5 most recent voters is hidden during an active election. Without masking, an administrator with live totals could watch one name change to Voted as one candidate's total rose.
Example: a 40-member parenting group has 22 votes in, and the administrator has live totals on. A 23rd member votes and one candidate's total goes up by 1. The newest statuses are masked, so the vote could belong to any of the 5 most recent voters.
Ballot IDs, voter labels and the audit log
An administrator can turn on two optional identifiers. A ballot ID is a unique identifier per voter for cross-referencing with the organization's own records. It does not let the administrator link a voter to their selections. Voter labels show a field such as name, membership ID or department next to each voter in the voter list and the audit log.
Every administrator action goes into a timestamped audit log: dashboard views, voter list access, result views and an early close. The log can be exported as a CSV, so a board or committee can review it after the vote. See audit trail.
These protections are part of every election on every plan, including free ones. See pricing.
What Admins Can See Questions
No. The Administrator results setting shows running totals, not individual ballots. Your choices stay decoupled from your identity.
No. Once you submit, your key is deactivated. No one can change your vote, including you.
Yes. Administrators can see whether each voter has voted, which helps them follow up on turnout. The status of the 5 most recent voters stays hidden while voting is open.
Yes. The comments box on each question is anonymous. Leave out details that identify you if you want your comment to stay that way.
Ask us about ballot privacy
Voters and administrators can email support@electionchamp.com with any privacy question. Email support is free for both.
Questions? Email support@electionchamp.com