Write it, publish it, share the QR code. Answers are encrypted in the respondent’s browser before they leave it — the private key stays with you, so a stolen database reads as noise.