Offline Childhood
Search
← All conversations

Risks and guardrails9 of 13

What they know about you

You give away information about yourself in exchange for using something for free, and that information lasts far longer and goes much further than you think.

How to explain it, by age

Same idea every time. Pick the version that fits for the child's age, and level up when it requires more complexity.

Ages 4-6

Keep it to permanence and to asking. "When you put a picture on the internet, it can be very hard to get back, so we ask before we share pictures of anyone." Include yourself in the rule, out loud, because that is what turns it from a restriction on her into a house rule.

Try this

Ask her permission before taking a photograph of her, and accept no as an answer. Doing it once teaches more than any explanation.

Listen for

Her asking before sharing something of somebody else's. Consent is the whole concept at this age. Data comes later.

If the child already has more access than most: If she uses a shared device, show her where photographs go when she takes them.

Ages 7-9

Introduce the record. "Apps keep a list of what you do. What you watched, how long, what you searched. They use it to choose what to show you next. No person reads it. A computer keeps the list, and the list does not get thrown away."

Try this

Look at the watch history or search history on a service you both use. The length of it is the point. She will be surprised, which is the correct reaction.

Listen for

Her asking who can see it. That question leads naturally to the next explanation.

If the child already has more access than most: Show her how to clear a history, and be honest that clearing the view is not the same as the company deleting it.

Ages 10-12

Introduce inference. "The facts you typed in are the boring part. The interesting thing is what can be deduced from your behavior: when you're awake, where you go, who you spend time with, what you paused on, etc. Based on all that info, you can be sorted into categories you never chose and would probably not agree with."

Try this

Look together at the inferred-interests page in a service she uses, which most large platforms provide. The wrong guesses are as instructive as the right ones, because both show a profile being built without her.

Listen for

Her distinguishing what she told them from what they figured out.

If the child already has more access than most: Introduce the idea that this data is bought and sold between companies she has never used.

Ages 13+

Extend to permanence and consequence. Data collected now persists into a future neither of you can see, and gets combined with data from elsewhere. Then be specific instead of ominous: what actually goes wrong is usually mundane, like an old post read by someone it was not written for, a location history revealing more than intended, a leaked database from a company that folded years ago. But it can be more alarming, and come with greater risks.

Try this

Have him check his email address on a breach-notification service and see which companies have already lost his data. The list is usually long and includes services he has forgotten.

Listen for

Him reasoning about who benefits and who carries the risk, rather than simply resolving to be careful.

If the child already has more access than most: Discuss why privacy is a collective problem and not just an individual one: his choices are constrained by what everyone around him has already agreed to.

Lead with permanence

The instinct is to teach this through fear (strangers, predators, ruined futures). But it backfires. It frightens children about the rarest outcomes, and it makes them hide their ordinary problems, which are the ones you can help with.

Permanence works better and happens to be more accurate. Things last. You cannot reliably take them back. That is guidance about how the world works, with no villain as part of the story. Children apply guidance more readily than they apply fears.

Start with your own behavior

This is the concept where adults are least credible.

A child who has been photographed and posted for a decade, without ever being asked, will notice the inconsistency the moment you raise this topic. Ask her permission before you photograph her or post anything about her – and honor a refusal. Modeling consent is worth more than discussing it. It also gives her a script she can use with her own friends, which is where most of this plays out.

Misconceptions to address

  • That deleting something removes it. It disappears from view. Copies, backups and screenshots do not care.

  • That private settings mean private. Fewer people can see it, some still can, and the company holds all of it.

  • That having nothing to hide makes it fine. The information is used to influence what you see and what you are offered, which affects everyone regardless of what they are hiding.

  • Adults post photographs of their children publicly for years and then ask those children to be careful online.

Running this with a class

Have the class list everything a phone could know about a person over one ordinary day: location, timing, who they messaged, what they searched, how long they lingered. Build the list on the board. Then ask what someone could figure out from it. The class arrives at inference on its own.

The decision this connects to