How Private Online Voting Works
Understand how an online election can verify voter eligibility and participation while keeping ballot choices separate from named voter records.
By Votes.ng team · Published · Updated
Private choices, known participation
A private online election needs to check who can take part without giving the organizer a list of how named people voted. In Votes.ng, a completed Live ballot is kept separate from the voter’s participation record.
An organizer can follow participation. The ordinary organizer interface does not provide a direct named voter-to-choice record. This is a concrete privacy behavior, rather than a promise of absolute anonymity.
Two different records
Think of a member record that says a person is eligible and has participated. Separately, the ballot records the choices for the positions. A completed ballot does not carry a direct reference to that voter’s identity.
This separation matters because an election must prevent a second successful ballot without making the membership list a record of preferences.
Privacy has practical limits
Small groups can make choices easier to infer. If only one person participated or everyone chose the same option, aggregate totals may suggest an individual’s choice even without a named ballot record.
Keep election administration information limited to people who need it. Do not ask voters to send screenshots of their choices, announce their choices in group chats, or fill out a second named preference form.
A private ballot also does not prove that the person using access is the intended recipient. Protect individual voting links and codes, and review the eligible voter list before launch.
One Live ballot per eligible voter record
Votes.ng checks individual access and records the ballot together with participation. Each eligible voter record can successfully submit at most one Live ballot. A personal link and the email/code method reach the same voting right.
The organizer still needs to remove duplicate people from the roster. Read duplicate-vote prevention and building the voter list.
What a receipt confirms
A recognized receipt helps confirm that a submission was recorded. Checking it does not reveal the candidate choices. A receipt is not a copy of the ballot or a statement about whether the organization followed every governing rule.
Use receipt verification to check a receipt and keep personal voting access private.
Explain the process to voters
A useful notice can say: Your organization can confirm participation, while your ballot choices are stored separately from your voter record. Add a clear support contact and explain that nobody should request private choices to solve an access problem.
Before launch, check the Security page, Privacy notice, and voter access guide. Test with sample voters so the privacy explanation matches the experience.