I can see that the vote is submitted like this (sample from vote.html):
result = anonymousvotingAddr.submitVote.sendTransaction(params, y, a1, b1, a2, b2, {
from: web3.eth.accounts[accounts_index],
gas: 4200000
});
Even if the params values are anonymous, they'll be registered along with the voter address in the blockchain.
Is not possible that, while scanning Etherscan, someone could guess who is the voter, given that they have the voter address and the params values?