English:Online Privacy and Digital Footprints
Online Privacy and Digital Footprints
Introduction
Every time you use a website, app, game, search engine, messaging service, or social platform, information can be created, shared, or collected. Some of that information is easy to notice, such as a photo you post. Other information is less visible, such as a website recording the time of your visit or an app using your location permission. Together, these traces can become part of your digital footprint.
Online privacy is about understanding and making choices about personal information: what you share, who can access it, how a service collects it, and what may happen to it later. Privacy does not mean hiding everything. It means having appropriate control, boundaries, and awareness.
This aiMOOC is designed for Grades 7–8. You will learn how digital footprints are created, how online audiences can change, how websites and apps may collect data, and how to make safer decisions about passwords, privacy settings, location information, and suspicious messages.
Learning Goals
By the end of this course, you should be able to explain the difference between active and passive digital footprints, identify personal information, judge the audience and risk of a post, explain why privacy settings have limits, describe basic online tracking, use safer account-protection habits, recognize common signs of phishing, and create practical advice for responsible digital citizenship.
Your Digital Footprint
A digital footprint is the trail of data connected with your activities on digital devices and online services. A footprint can include things you deliberately share and information that is collected as you use technology. It can affect privacy, security, communication, and how other people understand your online identity.
A useful idea is to think of your footprint as a data trail, not as a perfect permanent record. Some information disappears, some can be deleted, and some may be kept only for a limited time. However, content can also be copied, forwarded, downloaded, recorded, cached, or captured in screenshots. This means that after you share something, you may lose some control over where it goes.
Active and Passive Footprints
An active digital footprint is created when you intentionally do something that leaves information behind. Examples include posting a comment, uploading a photo, liking a video, writing a review, sending a public message, or creating a profile.
A passive digital footprint is created when data is collected as part of using a service or device, even when sharing that data is not your main goal. Examples can include browser activity, IP addresses, device information, cookies, app-use records, and location data when location access is enabled.
The difference is useful, but real situations can be mixed. For example, you may actively choose to use a map app while the app passively records technical or location information needed to provide the service.
Audience, Context, and Reputation
Before posting, ask yourself who the audience is now and who might see the content later. A message intended for friends can be forwarded. A private image can be shown to someone else. A joke that makes sense in one group can be misunderstood by another group.
This is sometimes described as a change in context: content moves from the situation where it was created into a new situation with a different audience. Good digital citizenship means thinking not only about what you want to say but also about how another person could reasonably understand it.
A Quick Pause-Before-Posting Check
Before you share, ask: Is it mine to share? Is it kind? Is it necessary? Does it reveal personal information? Who can see it? Would I be comfortable if it reached a wider audience? These questions do not guarantee that every post will be perfect, but they slow down impulsive sharing and improve decision-making.
Online Privacy
Online privacy is the ability to make informed choices about personal information and digital boundaries. Some information may be harmless in one situation but risky in another. For example, saying that you enjoy basketball is different from publicly sharing your full home address and the exact time your family is away.
Personal information can include your full name, birthday, email address, phone number, home address, school, usernames, photos, voice recordings, location, and information about your routines or relationships. Passwords, authentication codes, financial details, health information, and official identity numbers require especially careful protection.
Privacy Settings Help, but They Have Limits
Privacy settings can control who is allowed to view a profile, contact you, tag you, or use certain information. They are useful, but they are not a guarantee that content will stay private. People who can see your content may copy or reshare it, and services may collect information for purposes explained in their policies.
Check privacy settings when you create an account, after an app update, or when a service changes its features. If you are not sure what a setting means, ask a trusted adult, teacher, parent, caregiver, or school technology staff member before changing it.
Location, Photos, and Metadata
A phone or app may use location information for maps, weather, games, photo organization, or other features. Think about whether the app really needs that permission all the time. Some devices let you choose options such as approximate location, only while using the app, or no location access.
Digital photos and files can also contain metadata, which is information about the file rather than the main content. Depending on the device and settings, metadata may include the date, device details, or location information. Before sharing a photo publicly, consider what the image itself reveals too: street signs, school logos, house numbers, schedules, uniforms, or repeated routines can provide clues.
How Websites and Apps Collect Data
Websites and apps need some data to work. For example, a service may need to remember that you are signed in or keep items in a shopping cart. Other data may be used for analytics, personalization, advertising, safety, or service improvement. The exact details depend on the service.
Cookies and Other Identifiers
A cookie is a small piece of data that a website stores through your browser. Cookies can have useful purposes, such as remembering a language choice or keeping you signed in. Some cookies and related technologies can also be used to measure activity or help build a picture of interests across visits.
A cookie is not automatically a virus, and not every cookie has the same purpose. The important skill is to understand that convenience and data collection can happen at the same time. Browser and device settings often provide controls for cookies, site data, permissions, and tracking choices.
Profiles, Personalization, and Inferences
Services may use data to recommend videos, music, games, posts, or advertisements. A service can sometimes infer an interest from patterns in your behavior instead of asking you directly. For example, repeated searches or viewing choices may suggest a topic you like.
This is why privacy is not only about information you type into a profile. It also includes information created from patterns, technical records, and predictions about your interests.
Protecting Your Accounts
Account security supports privacy. If someone gets into an account, they may be able to view private messages, change settings, impersonate you, or access information stored in the account.
Strong and Unique Passwords
Use a different password for each important account. Reusing the same password creates a chain reaction: if one service is breached and the password is exposed, someone may try that password on your other accounts.
Long passwords or passphrases are usually stronger than short ones. When available and appropriate, a password manager can generate and store unique passwords. Do not share passwords with friends, and do not send a password or sign-in code in response to an unexpected message.
Multifactor Authentication
Multifactor authentication, often shortened to MFA, adds another sign-in step beyond a password. For example, an account may require a security key, an authenticator app, or another approved method. MFA can reduce the chance that a stolen password alone is enough to enter an account.
Never approve a sign-in request you did not start. If you receive repeated or unexpected authentication prompts, tell a trusted adult or the account owner and check the account through the official app or website.
Phishing and Social Engineering
Phishing is an attempt to trick you into revealing information, opening a harmful link or attachment, sending money, or giving access to an account. Phishing can arrive through email, text messages, social media, games, or messaging apps.
Warning signs can include unusual urgency, threats, prizes that seem unrealistic, unexpected requests for passwords or codes, strange sender details, and links that do not match the claimed organization. A message can still look polished and be fake, so spelling mistakes are not the only clue.
If a message worries you, do not rush. Open the official app or type the known website address yourself instead of using the message link. Ask a trusted adult, teacher, or responsible staff member for help when needed. Report suspicious messages through the service's reporting tools.
Sharing Other People's Information
Privacy is not only about your own data. You can affect someone else's digital footprint by posting their photo, tagging their location, sharing a screenshot, forwarding a private message, or mentioning personal details.
Before sharing information about another person, consider consent and context. Ask whether they agreed, whether the information is necessary, and whether sharing it could embarrass, expose, or endanger them. Respecting other people's boundaries is a core part of digital citizenship.
What to Do When Something Goes Wrong
If you accidentally share personal information, click a suspicious link, lose control of an account, or receive a threatening message, act quickly instead of hiding the problem. Stop interacting with the suspicious content, tell a trusted adult, change affected passwords through the official service, review account sessions and settings, and use the platform's reporting or recovery tools.
If another person's safety is involved, save useful evidence without spreading harmful content further and get help from a trusted adult or responsible authority. Different situations require different responses, so asking for help is a practical security skill.
Smart Privacy Habits
Use these habits as a flexible checklist rather than as rules that fit every situation:
- Privacy settings: Review who can see your content, contact you, tag you, or access your location.
- Personal data: Share only what is needed for the situation and avoid posting sensitive information publicly.
- Passwords: Use long, unique passwords or passphrases and use a password manager when appropriate.
- Multifactor authentication: Turn on extra sign-in protection when a service offers it.
- Phishing: Pause when a message creates urgency or asks for private information, money, passwords, or codes.
- Location privacy: Avoid sharing real-time routines or exact locations publicly without a good reason.
- Digital citizenship: Ask before posting personal information, photos, or screenshots involving someone else.
- Software update: Keep devices and apps updated because updates can include important security fixes.
Sources and Further Reading
The following reliable resources can help you continue learning:
- CISA Secure Our World: Practical guidance on passwords, multifactor authentication, phishing, and software updates.
- Federal Trade Commission Online Privacy and Security: Consumer guidance about privacy, security, and protecting personal information.
- Information Commissioner's Office Children's Online Privacy: Guidance for children and families about privacy choices and children's data.
- Wikipedia Digital Footprint: An overview of digital footprints and related privacy issues.
Interactive Tasks
Quiz: Test Your Knowledge
Which example best shows an active digital footprint? (Posting a photo to a public profile) (!A website recording the time of a visit) (!A device sending technical information) (!A browser storing a site cookie)
Which example best shows a passive digital footprint? (A website recording browsing activity) (!Writing a public comment) (!Uploading a video) (!Creating a profile biography)
What is the best reason to think about audience before posting? (Content can be copied or shown to people outside the original audience) (!Every online post automatically becomes a newspaper article) (!Privacy settings make all content impossible to copy) (!Only adults can view information on the internet)
Which action is the safest response to an unexpected message asking for your password? (Do not provide it and verify the request through an official channel) (!Send the password quickly before the request expires) (!Reply with the password but delete the message later) (!Forward the password to a friend for checking)
What is metadata? (Information about a digital file such as its date or device details) (!A secret second password for every social media account) (!A type of computer virus found in every photograph) (!A rule that makes all online posts permanent)
Why is reusing one password across many accounts risky? (One exposed password could be tried on several accounts) (!It makes every password automatically shorter) (!It prevents websites from using encryption) (!It disables all privacy settings on a device)
What does multifactor authentication add to an account? (Another sign-in factor beyond the password) (!A public copy of the account profile) (!A second username that everyone can see) (!An automatic post after every login)
Which statement about cookies is most accurate? (Cookies can support useful features and can also be used to record activity) (!Every cookie is a computer virus) (!Cookies can only be created by social media apps) (!Deleting cookies erases every digital footprint everywhere)
Which clue should make you slow down and check a message carefully? (It creates unusual urgency and asks for a sign-in code) (!It comes from a friend you spoke to in person) (!It contains a normal school assignment) (!It has a familiar subject you expected)
What is a respectful privacy habit when posting a photo of another person? (Ask for their permission before sharing it) (!Post it first and ask only if they complain) (!Add their location to make the post clearer) (!Assume friendship always means permission)
Memory Game
| Active footprint | Data you intentionally share through online actions |
| Passive footprint | Data collected while you use a service or device |
| Metadata | Information that describes a digital file |
| Passphrase | A long password made from a memorable sequence of words |
| Phishing | A deceptive attempt to obtain information or account access |
| Privacy setting | A control that changes who can access certain content or data |
| MFA | A sign-in method that requires more than one factor |
Drag and Drop
| Match the correct terms. | Topic |
|---|---|
| Public post | Content that may reach a wide audience |
| Location permission | A setting that controls whether an app can use device location |
| Unique password | A credential used for only one account |
| Suspicious message | Communication that should be verified before you act |
| Privacy checkup | A review of account visibility and data settings |
...
Crossword Puzzle
| Privacy | What word describes control and choices about personal information? |
| Footprint | What word completes the phrase digital trail or digital what? |
| Metadata | What is information that describes a file called? |
| Phishing | What is a deceptive attempt to steal information or access called? |
| Passphrase | What is a long password made from a sequence of words called? |
| Audience | What word describes the people who may receive or view a message? |
LearningApps
Cloze Text
Open-Ended Tasks
Easy
- Privacy vocabulary: Create an illustrated mini-glossary with eight key terms from this course and explain each term in your own clear English.
- Audience map: Draw an audience map for an imaginary social media post and show how the audience could grow if the post is forwarded or copied.
- Pause before posting: Write five short example posts and add one sentence below each explaining whether you would share, edit, delay, or delete it.
- Digital safety poster: Design a one-page poster that teaches younger students three privacy habits and one account-security habit.
Standard
- Privacy settings audit: With teacher or family approval, review the privacy settings of one account or a demonstration account and create a short report describing three useful settings.
- Digital footprint diary: Keep a one-day diary of the types of digital actions you perform without recording passwords or sensitive details, then classify each action as active, passive, or mixed.
- Phishing analysis: Study three teacher-provided fictional messages, mark the warning signs, and produce a short video or audio explanation of how you would verify each message safely.
- Digital citizenship interview: Interview a teacher, librarian, parent, caregiver, or school technology staff member about privacy challenges they think young people should understand, then summarize the interview.
Advanced
- Privacy policy investigation: Compare the child-friendly privacy information from two commonly used services and write a structured comparison of what data choices are easy or difficult to understand.
- Digital citizenship campaign: Plan and produce a mini-campaign for your class using a poster, slide, short video, or school announcement that promotes thoughtful sharing without using fear-based messages.
- Data flow model: Build a diagram showing how an imaginary photo could move from a phone to an app, a friend, a screenshot, and a wider audience, then explain where privacy decisions can be made.
- Ethical technology design: Visit your school library, media center, or technology office if possible, learn how privacy is handled there, and propose one design improvement for a fictional student app with reasons and trade-offs.
Learning Assessment
- Scenario reasoning: A classmate posts a group photo that includes a visible school timetable and location tag. Explain at least three privacy concerns and propose a safer version of the post.
- Security transfer: You learn that a password used for one game account appeared in a breach. Explain what you would do next if the same password had also been used on two other accounts.
- Audience analysis: Compare a private group chat, a public social media post, and a school learning platform, then explain how audience and context should change what you share.
- Phishing decision: A message claims that your account will close in ten minutes unless you click a link and enter a sign-in code. Explain how you would verify the claim without using the link.
- Privacy trade-off: A navigation app asks for continuous location access even though you use it only occasionally. Discuss the benefits, privacy costs, and a reasonable permission choice.
- Ethical sharing: A friend sends you an embarrassing screenshot of another student. Explain what responsible digital citizenship would look like and why forwarding it could affect another person's digital footprint.
Evidence of Learning
Knowledge: You can define online privacy, active and passive digital footprints, metadata, cookies, phishing, passwords, passphrases, and multifactor authentication. You can explain that online information is not always permanent but can become difficult to control after copying or resharing.
Skills: You can identify personal information, evaluate audiences, review privacy settings, reason about app permissions, recognize suspicious messages, choose safer account practices, and explain how data can move through digital systems.
Products: Strong evidence may include an audience map, privacy poster, settings report, digital footprint diary, phishing analysis, interview summary, data-flow diagram, or digital citizenship campaign.
Transfer: You can apply the same privacy questions to a new app, game, school platform, messaging service, or future technology even when its buttons and settings are different from the examples in this course.
OERs on the Topic
Linked Learning Areas
Online privacy and digital footprints connect with English language arts, Media literacy, Digital citizenship, Computer science, Cybersecurity, Social media, Personal data, Online identity, Phishing, and Information literacy. You use reading skills to interpret messages and policies, writing skills to communicate with different audiences, reasoning skills to judge risks and trade-offs, and technical knowledge to protect accounts and understand data collection.