Category: Online Safety

On a school laptop, your child can go from a Classroom assignment to YouTube under the same login, if the school has turned YouTube on. The two run on different privacy rules. Then a permission form for a new AI tool comes home saying student data is protected.

The promise is probably accurate. It just skips the parts you can act on, like which of your child’s accounts it covers, what the school switched on and who to ask when you want something deleted.

Those details live in contracts and admin settings that parents don’t usually see. Two teachers’ unions and Microsoft put many of those details in writing in September 2026. Google sets out its own rules for school accounts in a separate privacy notice.

A promise that lives in a contract

On September 9, 2026, the American Federation of Teachers, the United Federation of Teachers and Microsoft announced a National AI Safety & Privacy Standard for schools. The full standard is a memorandum of agreement that AI companies sign. Its protections don’t reach a school district automatically. The district has to ask for them and add them to its existing privacy or licensing agreement with the provider, and from that point the district can enforce the terms.

Microsoft is the only company whose signature appears on the published standard. The company says it’s making the protections available to every US school district from November 1, 2026.

Four terms speak to parents directly. Student data can’t be used to train AI models, apart from a narrow safety and security exception for things like spotting threats of violence. It can’t be sold or used for ads, either. Once a district starts a deletion, the provider has 180 days to remove the data from its active systems. Providers also have 90 days from the agreement taking effect to publish a plain-language guide for families.

School logins and home logins follow different rules

The standard only reaches generative AI tools “primarily designed and marketed” for students, educators and administrators. They also have to be used through a login under a school agreement. If a tool is ordinary office, messaging or search software, the standard leaves it out unless the product was built mainly for education. So a word processor your child opens with a school email address can sit outside the new terms, even though Microsoft signed them.

Google’s own terms draw a similar line inside a single school account. Under the Google Workspace for Education privacy notice, last updated August 13, 2026, Core Services such as Gmail, Classroom, Drive and Gemini for Education follow the school’s instructions and show no ads. Search, Maps and YouTube count as Additional Services. Those run under Google’s general privacy policy, even when your child opens them with the same school login.

Some Additional Services do show ads. Google’s notice says K-12 users won’t see personalized ones there. Where the education notice and the general policy disagree, the education notice takes precedence, so a school login still carries some protection on services like YouTube.

A personal Gmail account or a family tablet profile is a different case. The standard and Google’s notice are both written around accounts a school issues and manages. For apps on a personal account, SafeSearchKids’ May 2026 guide starts with reading an app’s privacy policy before your child downloads it. Before anything else, find out whether each device your child uses is signed into a school account or a personal one, because that decides which of these sets of terms applies to everything they open.

Figure 1. On one school login, Classroom falls under the school’s contract with Google while YouTube falls under Google’s general privacy policy. A personal login brings each app’s own terms.

What did the school switch on?

Coverage also depends on settings chosen in an admin console most parents won’t ever open. Google’s notice lets school admins decide which Core and Additional Services students can reach. It’s the admin’s job, too, to get parental consent for any Additional Service they turn on. If YouTube works on your child’s school account, the school should have asked for your consent.

Memory is the setting to ask about. The standard gives students three controls over what it calls Memory Files, the details a tool saves from earlier chats. They’re named “See it,” “Erase it” and “Turn it off,” which a ten-year-old could follow. Viewing the saved details has to be possible “in plain language, at any time,” in the standard’s words. For a younger child, a parent can use the controls through the district.

SafeSearchKids’ guide to student data privacy tells teachers to follow the school’s approved list and to get approval before asking students to use a new program or website. That approval step means a staff member has probably looked at the tool before your child did. Ask your child’s teacher what’s switched on.

Questions about access and deletion go through the school

For children under 13, the Federal Trade Commission’s COPPA guidance lets a school consent on a parent’s behalf only when the data is used for the school and for no other commercial purpose. In that setup, it’s the provider’s job to let the school review and delete a child’s information when the school asks. The FTC also suggests schools consider letting parents review it. Google points families the same way. Its notice tells parents to “contact your school admin” with questions about how a child’s account is managed.

Under FERPA, the federal student privacy law, parents can also ask the school to see their child’s education records.

Timing depends on who sends the request. Under the new standard, the 180-day deletion clock starts when the district tells the provider to delete, and backups get the same window. That’s only true where your district has adopted the standard and the tool’s covered. Your own email won’t start the clock until the district passes it on.

Start with the school or district, not the company. The standard has each district work out how families send data requests and then tell them, so its privacy or technology contact should know the route even when the request goes on to the company. Put the tool’s name and the account in your first line, so nobody has to write back to ask which one you mean.

Before you sign the next AI permission form

If your school can tell you which login the tool uses and who handles data requests, you’ve got what the promise was missing. If it can’t name anyone, ask for the district’s privacy contact before you sign. You can still opt out after that. Asking first just means your child isn’t stuck doing an assignment without the tool the rest of the class has.

Keep your note to the school short. Two or three questions like these will do:

• Is the tool’s memory switched on, and can we clear it?
• Does the tool run on our child’s school login, or can it be used with a personal account too?
• If we want to see or delete what the tool has saved, who do we write to?

Your child can do one part of this on their own: before typing anything personal into an AI tool, they check which account is signed in. A name like “login first” helps it stick. The account they’re on decides whether the school’s contract covers what they type next, or whether Google’s general policy or some other company’s terms do instead.

About the Author:
Ryan Harris is a copywriter focused on eLearning and the digital transitions going on in the education realm. Before turning to writing full time, Ryan worked for five years as a teacher in Tulsa and then spent six years overseeing product development at many successful Edtech companies, including 2U, EPAM, and NovoEd.

Families often set up safer search settings at home and then wonder what happens when a child uses a tablet at school, a friend’s house, or on mobile data. The honest answer is not one simple yes or no. A setting can come from an account, a device, a school, or the network itself.

Each source has a different reach. Understanding which one is in control is more useful than assuming that every setting follows a child everywhere or that one connection change explains every result.

Start with the specific tool. Google’s SafeSearch guidance explains that SafeSearch applies to Google Search. It does not control other search engines or the rest of the web. It aims to identify and filter inappropriate content, but no filter is a replacement for an adult conversation, age-appropriate rules, or attention to a child’s needs. Naming that scope matters. When a family expects a search filter to cover every app and site, a normal limitation can look like a mysterious failure.

Ask where the setting comes from

An account-based setting is tied to the account used when searching. A supervised child account can have settings managed through a parent’s tools. A device may also be managed by a school or organization. Network-based controls can apply to devices on that particular Wi‑Fi network. In Google Search, parents, schools, device administrators, and network administrators can lock SafeSearch in some contexts. The same child can therefore see different behavior depending on which account, device, and network are involved.

That is why the first check should be quiet and ordinary. Ask: is the child signed into the expected account? Is this the family device or a school-managed device? Are they on home Wi‑Fi, school Wi‑Fi, mobile data, or a guest network? You do not need to test with inappropriate searches. The settings page and the account’s management information can show whether a setting is on and, in some cases, who manages it. Use those official controls rather than experimenting with risky terms.

For a parent, the useful result of that check is a simple picture of responsibility. If the account setting is managed by family tools, review it with the family account. If the device belongs to school, ask the school before changing anything. If the setting only appears on home Wi‑Fi, treat it as a home-network question. This small distinction prevents a child from receiving mixed messages from adults who each assume someone else controls the same setting.

It is also worth checking ordinary details before worrying about the filter itself. A child may be signed out after an update, using a different browser profile, or moving between a personal and school account. Those situations can change what the browser shows without anyone deliberately changing a safety rule. Do not blame the child for a mismatch before reviewing the context. A calm question about the device and account usually provides more useful information than a sudden restriction or accusation.

Location changes can change the context

A laptop carried from home to school is still the same laptop, but its network context has changed. A phone moving from Wi‑Fi to mobile data has changed context too. That does not mean protections have disappeared; it means the protection may be coming from a different layer. A school may manage a device or network in ways that do not apply at home. A parent-managed account can travel with the account, while a home router rule normally relates to devices using that network.

Do not turn this into a lesson in getting around controls. If a child sees a result that does not fit the family or school expectation, pause the activity and ask the parent, teacher, or administrator who manages that setting. That response keeps the adult responsible for the rules involved and avoids teaching a child to treat safety boundaries as puzzles. It also leaves room for a technical issue, a changed account, or a policy decision rather than assuming bad intent.

Keep connection tools in their proper place

A VPN app routes traffic through the connection it provides. It is not a parental-control system, a school-policy system, or a promise that every search setting will behave the same way on every network. X-VPN routes traffic and does not replace parental controls or school policy. That is a useful boundary to explain to older children: tools can have one job without being responsible for every part of online safety.

Likewise, a free VPN option is not evidence that a child’s account settings are compatible with every network or device. Do not use a connection tool to test whether controls can be bypassed. If a setting appears different, bring the device back to the expected account and follow the official support guidance for the family or school system. The aim is a predictable, supervised experience, not a technical contest.

Build a plan that children can understand

Children benefit from knowing the simple rule behind the settings: search filters are one layer, not the whole plan. A clear family conversation can cover what to do when a surprising result appears, how to ask for help, and why certain accounts or devices have different rules. Keep the instructions age appropriate. For a younger child, the rule may be “close it and tell me.” For an older child, it may include checking which account is signed in before assuming a setting is broken.

Parents can also make the setup easier to review. Keep recovery details for the supervised account current. Know which devices belong to school management. Review any major change to the home network with the same care you would give to a new device. None of these steps creates perfect control, but together they reduce confusion and make an adult easier to reach when it matters.

The best question is not “Will one setting follow everywhere?” It is “Which layer is meant to help in this situation?” Account, device, and network controls can support one another, but they do not all travel in the same way. Once a family understands that, an unexpected difference becomes a reason to check the right adult-managed setting, not a reason to panic or try to work around it.

Kids today utilize the internet for practically everything they do, from doing schoolwork, playing games, communicating with friends, watching movies and, sometimes, taking lessons. This also means that teenagers often click on links, create accounts and share information without realizing where it may end up.

Parents don’t have to oversee every click. There are several easy behaviors, that youngsters can take on to prevent many of the troubles that they are likely to encounter online.

1. Public Wi-Fi is convenient, but not necessarily the greatest location to login

Kids don’t just go on the internet at home. They utilize Wi-Fi at libraries, cafés, hotels and airports, sometimes to check school accounts, participate in an online course or just to chat with pals.

On an unfamiliar network you should be a bit more careful than you are on your home Wi-Fi. A VPN can also add an extra level of anonymity by encrypting the traffic between the device and the VPN service. This leads to a typical question parents ask: is a VPN safe? A good VPN is a great security tool, especially on public Wi-Fi, but it can’t protect a child from everything they might see online.

For example, a VPN won’t detect every bogus login page or prevent a person from typing a password on the wrong website. So, it’s as crucial to defend the connection itself as it is to know what you’re clicking on.

2. Links are not always what they seem

A notification can be from a game, school platform or streaming service requiring the user to “verify” their account. The URL then redirects them somewhere else. Tell kids to look at who sent a message before clicking links. A request for a password or payment information out of the blue is an excellent reason to stop and check.

Phishing also doesn’t always look blatantly fishy. Not all scams have horrible spelling or a ridiculous story behind it. A false login page can look almost identical to a website a child visits every week. If a notification warns that there is an issue with an account, it is generally safer to go directly to the well-known website, rather than clicking on the link in the message. If the alert is legitimate, then the same information should typically be accessible via the account itself.

3. Have different passwords for different sites

Having the same password for all accounts is easier, until one gets compromised. Then the same login data might also give someone access to a number of other accounts. Kids should have various passwords for essential accounts and utilize two-factor authentication when it’s available. They should also be aware that passwords are confidential, even if a friend requests for one.

To a child, sharing a game password with a best friend may not sound like a security problem. That still involves providing another person access to the account.

4. Personal information can build rapidly

Kids may know better than to post their home address. Other details are benign in themselves: a school name, a sports club, a date of birth, an outfit, a portrait taken away from home. These elements together can tell far more than you’d like.

Cameras can also leak information. Video calls need the same respect. A school certificate hung on the wall, family portraits or paperwork visible behind a youngster may all provide personal information without it being consciously offered. A simple background or virtual background can help.

5. Recheck the app permissions

A math app probably doesn’t need access to a child’s contact list. They might not need to be in a certain spot for a simple game. Parents should check permissions often and not provide every access upon install.

6. Stop delaying updates

It’s simple to hit “remind me later” when an update pops up, particularly if a child is in the middle of a game or needs the device for schoolwork. But upgrades aren’t only about bringing new features. Often they patch security weaknesses that might leave a phone, tablet or computer vulnerable to attack.

The UK’s National Cyber Security Center suggests applying software and app updates as soon as they are available and turning on automatic updates when possible. Every now and then check your child’s phone, tablet, browser and apps they use often. If there are automatic updates available, turning them on means one less security task to worry about.

7. Give the easiest technique to tell an adult

No security system works in all situations. A child could click on the wrong link, send an email they later regret, or get a message that makes them uncomfortable. What is about to follow is of the greatest significance.

Young people are more likely to seek help promptly knowing the first response will not be anger or loss of access to their devices. The safest children online are those who know the rules. It works a whole lot better if people know who to call if something goes wrong.

Chess is one of the few screen activities most parents feel good about: it builds patience, focus and the habit of thinking before acting. But an online chess class can mean anything from a vetted coach with a small group to an open video call with strangers, so it pays to ask a few safety questions before you sign up.

Here are the seven we would ask as parents.

1. Who exactly is the coach, and can you check?

A good online chess school names its coaches, shows their photos and lists verifiable credentials. In chess this is easy to check: titled and rated players have public profiles on the FIDE ratings website of the International Chess Federation, where you can see their name, country, title and rating history.

Be cautious with listings that only show a first name or a nickname, or that say “experienced coach” without anything you can verify. You would not drop your child at a club run by an anonymous adult; an online class deserves the same standard.

2. Where does the lesson actually take place?

Ask which platform the class uses and who controls it. The safest set-ups share a few features:

• the lesson link is private and only works for enrolled children;
• the coach (not the children) controls who is admitted to the room;
• children cannot privately message each other or the coach through the lesson tool;
• there is no public chat open to people outside the class.

If the answer is “we’ll send a link on WhatsApp” or “join our open server”, keep asking.

3. How big is the group, and who else is in it?

Small groups are better for learning, a coach can only really watch four or five children’s moves at once, and they are also easier to supervise. Ask how many children are in a group, whether groups are matched by age, and whether adults or older teenagers ever join the same class. A group of similar-age children of similar level is both safer and more fun.

4. Is the camera required, and are lessons recorded?

Some schools ask children to keep cameras on so the coach can see they are engaged; others make it optional. Either can be reasonable. What matters is that the school tells you clearly. Ask:

• whether lessons are recorded, who can watch the recordings and how long they are kept;
• whether you can sit in on a lesson or watch from the next room;
• whether screenshots or clips of children are ever used in marketing (they should not be without your written consent).

5. What personal data do they collect about your child?

A chess class needs very little: your child’s first name, age and level, and your contact details as the parent. Be wary of sign-up forms that ask a child to create their own account with an email address, a full date of birth or a photo. In the United States, services for children under 13 must follow COPPA, the Children’s Online Privacy Protection Rule, and obtain verifiable parental consent before collecting a child’s personal information; a reputable school will make that process visible and will have a readable privacy policy written for parents.

6. What happens between lessons?

Most good programs give homework, usually short chess puzzles,  and many use online platforms for it. That is a good thing, as long as you know where your child will be practising. Ask whether homework happens inside the school’s own platform or on a public chess website, and if it is a public site, whether the school recommends child-safe settings such as disabling chat and only playing against computer opponents or friends. Free platforms like Lichess offer a “kid mode” that switches off chat and social features, worth turning on for any young player.

7. Can you cancel easily, and is there a trial?

Safety is also about not being locked in. A trustworthy school lets you try a lesson or a short first month, shows the full price before you pay, and lets you cancel online without a phone call. If the terms are hard to find before checkout, that tells you something about how the school treats parents.

A quick checklist before the first lesson

• Coach’s full name and credentials checked
• Private lesson room, admitted by the coach
• No private messaging between children
• Group size and age range confirmed
• Recording and camera policy explained
• Privacy policy read; you, not your child, created the account
• Homework platform set to child-safe mode
• Clear price and online cancellation

Comparing options

Not every family needs a live class. Free sites and apps are excellent for practice, and some children enjoy a self-paced course. If you are weighing the different kinds of chess classes, free platforms, kid-safe apps, class marketplaces, private tutors and dedicated academies, this overview of the best online chess classes for kids compares them side by side, including prices.

A good sign is a school that publishes its safeguarding and online safety practices for parents: who the coaches are, how lesson rooms are run and what happens to your child’s data. Every school should be able to show you this before the first lesson.

The bottom line

Chess is one of the healthiest things a child can do on a screen. The board is the same whether it is wooden or digital; what changes online is who else is in the room. Ask the seven questions above, and you will quickly separate the schools that have thought about your child’s safety from the ones that have not.