What your child will learn
Explain what cookies and tracking are and why "Accept All" consent banners often grant more access than needed
Apply a "minimum-necessary" rule to sign-up forms: only share what the service truly needs to work
Recognize when an app permission request is overreach (e.g. flashlight asking for location) and how to decline
Build a privacy-mindful screen name, avatar, and profile — no school, real name, address, or birthday
How this mission works
A grades 3–5 student spends more screen time than any previous generation — which is exactly why apps and websites work hard to collect data about them. In this mission, students work through 5 real scenarios: deciding what to share on a free online game sign-up, reading a cookie consent banner that pre-checks "Accept All," declining a flashlight app that asks for location, leaving the birthday field empty on a download site, and building a profile that keeps their school, real name, and address off the public internet. Pass 4 of 5 scenes to earn the Data Privacy Detective badge and 150 XP.
What students actually encounter
A free online game asks for your full name, school, home address, and a photo to sign up. What do you type?
A website shows a cookie banner pre-checked "Accept All." What is the safe move?
A flashlight app opens and immediately asks "Allow this app to use your location?" even though it never had a map. What do you do?
Cipher is with them the whole way
When a student gets stuck on Data Privacy Detective, Cipher appears with a mission-specific nudge — no spoilers, just a hint toward the right thinking. Make a wrong choice, and Cipher explains the real-world consequence. Finish the mission, and Cipher generates a personalized performance debrief based on exactly how the student played it.
ISTE alignment
Students identify what personal data apps and websites collect (cookies, location, sign-up fields, birthdays), recognize overreach in consent prompts, and apply a "minimum-necessary" rule before sharing anything online.