Control what your responders see with hidden query parameters