← Cyber safety and privacy

Your digital footprint

Your digital footprint is everything apps record about you: what you give them, and what they collect as you use them (where you are, what you open, when). A good app collects only what its purpose needs. You manage your own footprint by checking settings, which often start open.

Ava typed three things into the club app. It knows eight things about her. Where did the other five come from?

Your mission: the club app is about to launch. Find out what it records about members, cut what it doesn't need, and help Ava set up her own account.

EngageCommit to a prediction before you test anything. A wrong guess is fine: it shows you what to look for.

Engage: what does it know?

Ava types her name, school email and one poll answer into the club app. What else could the app know about her?

ExploreTry it on the board and compare what happens with your prediction.

Explore: given or collected?

Was your prediction right?

Try it yourselfYour edits are saved in this browser.

Sort everything the app recorded about Ava: did she give it, or was it collected as she used the app?

Use the board. This ticks when you get there.

ExplainPut a name to what you saw, and why it works.

Explain: does it need it?

Your digital footprint is all the data about you that systems record: what you give and what they collect as you use them.

Worked exampleBefore each step, say what you think comes next.
  1. purpose\text{purpose}Start from what the app is for: news about club meetings.

Find the mistake

Sam builds the sign-up form. Click the line where it first goes wrong.

ElaborateUse the idea in a new situation.

Elaborate: the sign-up form

Try it yourselfYour edits are saved in this browser.

The app's purpose is news about meetings. Mark every field and setting Needed or Not needed.

Use the board. This ticks when you get there.

Now the same form is for the excursion to the science museum. Mark each one again.

Use the board. This ticks when you get there.

ElaborateUse the idea in a new situation.

Elaborate: Ava's settings

Try it yourselfYour edits are saved in this browser.
Need a hint?

Read what each setting does before you change it.

Another hint

Meeting reminders are why Ava joined: keep those.

Ava's settings came open. Make her account as private as it can be while she still hears about meetings.

Use the board. This ticks when you get there.

EvaluateLook back at your first ideas and what changed.

Evaluate: look back

A free quiz app asks to see your contacts and your location. Its purpose is quizzes. What should you do?

For teachers

Students sort what an app records into data given and data collected as it is used, judge each sign-up field against the app's purpose, and set an account to its most private while keeping its purpose (AC9TDI8P14 nodes 1 to 3). A 5E mission lesson. About 40 minutes.

Open the teacher guide: answers, solutions, slides and a worksheet.

Students will be able to

Before class

Try the board yourself. Ava and the club app are made up.

The one idea: collect only what the purpose needs, and check your own settings, because they often start open.

Typical width (node 1): have pairs open the privacy section of one app they use (or a printed privacy policy) and list three things it collects, at least one collected as they use it.

Running the lesson

  1. Engage: ask what an app might know that you never told it.
  2. Explore: ask which collected-as-used items surprised them.
  3. Explain: model the purpose test on one field aloud.
  4. Elaborate: ask why the phone number changed from Not needed to Needed.
  5. Evaluate: discuss which of their own settings they'd change.

The hard part (on purpose)

Students mark everything Not needed. Ask what would stop working: an app needs some data to do its job.

When students get stuck

Stretch and support

Stretch: Compare what two apps you use collect (their privacy pages) and decide which collects more than its purpose needs.

Support: The purpose test on a card: what is the app for? Would it still work without this?

Where it leads

Next (Years 9–10): Threat models.

What each step is for

Now you can
Next lesson5. Threat modelsA threat model follows the data through a system on a data-flow diagram: where it travels, where it is stored, and who can change it. Each point has its own risk (read on the way, copied from storage, used by the wrong person) and its own defence (HTTPS, hashing and encryption, access control and MFA). One defence doesn't cover them all.