My Studies · Management

Manage studies, sharing, links, and task properties.

Loading studies…

Study	Owners	Runtime	Config	Runs	Last Result	Actions

My Studies · Results

Open and export run data by study.

Loading studies…

Study	Owners	Runs	Last Result	Actions

Experiment Preview

Run a full experiment session before deploying links.

Analysis

Run basic descriptive reports per study using a Python or R workflow.

Report Inputs

Study

Analysis engine

Max numeric variables

Completed runs only Overview Field coverage Numeric summary Include config-like variables

Behavioral variables of interest (comma-separated keywords)

Pick a study and generate a report.

Report Jobs

Integrations

Generate recruitment-platform launch links and completion redirects per study.

Study

This study selection is shared by both SONA and Prolific generators.

Select study

SONA Link Generator

Create SONA-friendly launch links that return participants to SONA after completion.

Participant ID (optional)

SONA completion URL

SONA abort URL (optional)

Supported placeholders: {participant_external_id}, {participant_key}, {run_session_id}

Prolific Link Generator

Generate a Prolific-ready external study URL for the selected study.

Prolific completion code

Completion behavior

The generated URL includes Prolific placeholders: {{%PROLIFIC_PID%}}, {{%STUDY_ID%}}, {{%SESSION_ID%}}.

Pick a study and generate links.

No SONA links generated yet.

No Prolific link generated yet.

Ethics & Compliance

Copy-ready boilerplate text for IRB / ethics board submissions.

Data Encryption at Rest

Use the following paragraph when describing how participant data is stored:

All behavioural data collected through CogFlow are encrypted at rest using AES-128 symmetric encryption (Fernet, RFC 7519 compliant) before being written to the database. Each result payload is independently encrypted with a server-managed key. Encryption occurs server-side immediately upon receipt; raw participant responses are never persisted in plaintext. Decryption requires authenticated researcher access and, where multi-factor authentication is enabled, a verified TOTP session within the preceding 24 hours.

Participant Identifier Pseudonymisation

Use the following paragraph when describing identifier handling:

Participant identifiers are pseudonymised prior to storage. External participant IDs (e.g., Prolific IDs, SONA codes) are hashed using a salted one-way function before being written to the database. The plaintext identifier is never stored. A researcher-visible truncated preview (first six characters of the hash) is retained solely for quality-control purposes and cannot be reversed to recover the original identifier.

Data Transmission Security

Use the following paragraph when describing data in transit:

All data transmitted between participants' browsers and the CogFlow platform server are encrypted in transit using TLS 1.2 or higher. The platform does not use persistent client-side storage (cookies carry only session tokens; no behavioural data are written to localStorage or IndexedDB). Session tokens expire on logout and are bound to the server-side session record.

Data Retention and Deletion

Use the following paragraph when describing retention policy:

Participant data are retained for the duration of the research project and for a post-completion period as specified in the approved ethics protocol, after which all result envelopes are permanently deleted from the database. Researchers may request deletion of data for individual participants or for an entire study at any time via the portal. All deletion events are recorded in an immutable audit log with timestamps and requesting-user identity.

Access Controls and Audit Logging

Use the following paragraph when describing access controls:

Access to participant data is restricted to the owning researcher account and platform administrators. All sensitive actions (data decryption, participant link generation, researcher assignment changes, data export, and deletion requests) are recorded in a tamper-evident audit log that captures the acting user, action type, target resource, timestamp, and outcome. Audit records cannot be modified or deleted by any user role.

Credits

Task authorship and contribution mapping using CRediT role categories.

This view follows the same principle as the Builder authorship tracker: each task_type lists its key components/features and associated contributors.

Source tracker: docs/task_feature_catalog.md from the original Builder repo.

CRediT reference: Zenodo Record 18421449

Task Scope Reference

Task Type	Schema-backed Components In Scope
Loading task scopes…

Task Contribution Assignments

Loading credits…

Task Type	Component (Task Scope)	CRediT Role	Contributor	Notes	Actions
Loading credits…

Feedback

Send product feedback directly from the portal.

Share Feedback

Admin Panel

Manage platform users, roles, and account lifecycle.

Loading users…

Emails are hidden by default for screen-sharing safety. Click Reveal to view per user.

Username	Email	Role	Active	MFA	Last Login	Actions

Account Settings

Manage your credentials, MFA, and profile.

Two-Factor Authentication (TOTP)

Works with any TOTP-compatible authenticator app (for example Duo, Google Authenticator, Authy, 1Password, Microsoft Authenticator).

My Studies · Management

My Studies · Results

Experiment Preview

Analysis

Report Inputs

Report Jobs

Integrations

Study

SONA Link Generator

Prolific Link Generator

Ethics & Compliance

Data Encryption at Rest

Participant Identifier Pseudonymisation

Data Transmission Security

Data Retention and Deletion

Access Controls and Audit Logging

Credits

Task Scope Reference

Task Contribution Assignments

Feedback

Share Feedback

Admin Panel

Create New User

Account Settings

Change Password

Two-Factor Authentication (TOTP)

Sign in

Create account

Reset password

Set new password

Two-factor authentication

My Studies · Management

My Studies · Results

Experiment Preview

Analysis

Report Inputs

Report Jobs

Integrations

Study

SONA Link Generator

Prolific Link Generator

Ethics & Compliance

Data Encryption at Rest

Participant Identifier Pseudonymisation

Data Transmission Security

Data Retention and Deletion

Access Controls and Audit Logging

Credits

Task Scope Reference

Task Contribution Assignments

Feedback

Share Feedback

Admin Panel

Create New User

Account Settings

Change Password

Two-Factor Authentication (TOTP)