What To Teach Students About Their Digital Footprints

A digital footprint includes what students publish, what others publish about them, and the information services collect as they use them.

Those records require different decisions. A public photo raises questions about audience and consent. A screenshot raises questions about missing context. An app requesting location access raises questions about what information it needs. Teaching students to distinguish these situations gives them more to work with than ‘be careful what you post.’

1. Check what someone outside your audience can see

Students may know what their friends see without knowing what is visible to someone who does not follow them. Start with the profile itself: name, username, photo, biography, links, and any public posts.

Where a platform offers a public-profile preview, use it. Otherwise, viewing the profile while signed out can reveal some public information, although login restrictions may limit the check. Search a name in quotation marks and search frequently used usernames separately. An empty result does not establish that nothing is public.

The useful question is specific: ‘Which details are visible to people I did not choose?’ A student might want artwork to be public while keeping their school, personal email, and daily routine out of the profile. That distinction matters more than making every account private by default.

The FTC’s guidance on kids and cell phones offers additional prompts for reviewing sharing and privacy with students and families.

2. Look at what separate details reveal together

A team name identifies an affiliation. A tagged venue identifies a place. A caption saying ‘Every Tuesday until eight’ identifies a routine. Together, they can suggest where someone is likely to be at a particular time.

Before posting, examine the image, caption, location tag, and existing profile together. Would a new post connect details that were previously separate? A reused username can also give someone a way to look for related accounts, although matching usernames alone do not prove that accounts belong to the same person.

Choose the change that addresses the disclosure: omit the recurring schedule, remove the location tag, crop an identifying document, or restrict the audience. Posting after leaving a location reduces immediate location disclosure; it does not conceal a routine described in the caption.

3. Notice what disappears when a message is forwarded

A screenshot can separate a message from the conversation that made it understandable. A sarcastic reply between friends may look like a serious statement to someone who never saw the original exchange. A tentative opinion can look like a settled position when the questions and revisions around it disappear.

Before forwarding an exchange, identify what the next reader will be missing: earlier messages, the relationship between participants, or an explanation that came afterward. Also consider whether sharing the exchange exposes someone who expected a private conversation.

Try this in class: Show ‘Great. Exactly what we needed.’ on its own. Then place it after two different messages: ‘The replacement equipment arrived’ and ‘The file was deleted.’ Ask students which interpretation the words support alone and what the surrounding exchange supplies.

4. Get permission for the actual use

Agreeing to appear in a photo is not necessarily agreeing to have it posted publicly, tagged with a name, or turned into a joke. Permission needs to match the use.

‘Can I post this photo on our public club account and tag you?’ gives someone a decision they can understand. ‘Can I take a picture?’ does not address publication. The same distinction applies to sharing a friend’s writing, recording a conversation, or posting a screenshot of a message.

Teachers should model this distinction when publishing student work: specify the audience, attribution, and identifying details, and follow school consent procedures. This is one concrete application of digital citizenship. TeachThought’s rules for digital citizenship provide related discussion prompts.

5. Separate audience settings from data collection

‘Who can see my post?’ and ‘What does this service collect?’ are different questions. Restricting a post’s audience does not answer whether an app collects location or activity data.

Review these controls separately; names and availability vary by service and device:

A photo-editing task may require access to a selected image without requiring the entire photo library. Where that choice is available, grant access that fits the task. The FTC’s explanation of online tracking covers permissions and collection controls. It also explains why private browsing does not prevent websites from seeing online activity.

For an account-specific example, use Google’s Search privacy controls to examine the difference between saved account activity and public search results. For a policy-reading exercise, select a passage from TeachThought’s privacy policy and ask students to identify the information described, its stated use, and any choices offered.

Keep privacy tools tied to a particular question. A comparison of VPN protocols, for example, concerns the connection a VPN provides; it does not explain how to remove a public post or change its audience.

6. Match the cleanup to where the information lives

‘Delete it’ is incomplete advice when a post, screenshot, and search result exist in different places.

Google’s personal-information removal guidance explains that distinction and the types of information eligible for requests. If content involves threats or harassment, use the school’s reporting and safeguarding procedures; students should not have to negotiate its removal alone. TeachThought’s internet safety guide addresses those situations.

If considering a service such as Privacy365, check which sources it covers, what removal it promises, its cost, and what personal information it requires. Account protection is a separate task; CISA’s password guidance provides a reference for that work.

7. Decide what is worth making public

A digital footprint can also document work a student wants others to see: an illustration portfolio, a coding project, a performance, or a contribution to a community publication.

Review that material for accuracy and ownership. Does it identify the student’s actual contribution? Credit collaborators? Link to work that still exists? Include personal details the audience does not need?

For example, ‘I built this game’ misrepresents a group project if the student created its artwork. ‘I designed the characters and backgrounds’ gives a more accurate account of their skill. Managing a public record includes making it useful and truthful.

For students sharing portfolios or submitting work by email, use an address they check and can retain access to. Tools that test email for spam concern message delivery, rather than public visibility; ordinary student correspondence generally does not require a testing service.

Classroom Activity: What Can You Infer From This Profile?

Time: 10–15 minutes. Use the fictional details below; students do not need personal accounts or devices.

Display name: Alex R.
Username: alexdraws27
Bio: Sketchbooks, volleyball, Northside Falcons.
Public post: ‘Tuesday practice at Eastbank Sports Centre, 6–8. Same every week.’
Birthday post dated May 14: ‘Sixteen today.’
Separate public art profile: Username alexdraws27; display name Alex Rivera.

1. List three details explicitly stated in the posts.
2. Identify two conclusions someone could draw. Label each as supported, plausible but unconfirmed, or unsupported.
3. Alex wants people to find their artwork. Choose two details to change while preserving that purpose. Explain what each change accomplishes.

Teacher key: The profile states a team affiliation, a recurring practice location and time, and an age on a dated post. These are public claims, not independently verified facts. The matching usernames suggest that the art profile may belong to the same Alex; they do not establish identity. The posts do not establish Alex’s home address, school, or attendance at every practice.

Defensible revisions include removing the recurring schedule and omitting the age or birthday detail. Students may reasonably retain an intentional link to the art portfolio. Assess whether their choices reduce a specific disclosure while preserving Alex’s purpose, rather than whether they remove the most information.