What Should Stay Private: A Family Guide

Ask most children what they would never share online and they will tell you their address. Ask what they posted this week and it might include their school uniform, their street at dusk, the walk they do every morning, and the exact place their younger sibling plays.

None of those is an address. Together they are a map.

The accumulation is the risk

This is the thing that is genuinely hard to explain to a child, and worth taking the time over.

A single photo is almost never the problem. The problem is that a school badge in one picture, a street name in another, and a routine mentioned in passing add up to something none of them contained on their own. Nobody made a mistake at any individual step.

Children are not careless about this. They are optimising for connection, which is immediate and real, against privacy, which is abstract and hypothetical. That is a rational trade from where they are standing. The job is not to tell them they got it wrong. It is to make the abstract thing concrete.

What actually needs protecting

Keep this list short enough to remember.

Where you live. Your real full name. Your school. Photographs that show home clearly. Where younger siblings play. When the house is empty.

That is most of it. Notice what is not on the list: their opinions, their jokes, their art, their favourite things. Those are theirs to share, and treating everything as dangerous is how a child stops listening.

The one to watch for

There is a particular pattern worth teaching, because it is more useful than any list.

Somebody new is lovely to your child, constantly and quickly. They ask a great deal about where your child goes and what they have and where the little ones play. And they never share anything about themselves.

A real friend shares. Someone who only ever collects is doing something else. That asymmetry is the signal, and it is one a child can learn to notice without knowing anything about the person on the other end.

A note on wanting to be seen

The desire for recognition is not a childish weakness to be corrected. Adults refresh their notifications for exactly the same reason. A child who loves the attention their posts get is behaving completely normally.

That matters for how you approach this. If the message is that wanting to be seen is the problem, you are asking them to stop being a person. If the message is that a few specific things are not for trading, that is a rule they can actually keep.

Practical settings worth checking

Platform interfaces change constantly, so rather than click-by-click instructions, here is what to look for in whatever menu it currently lives in.

Who can message your child. Who can send a friend request. Who can see when they are online. Whether voice chat is open to strangers. For younger children, default most of these to friends only.

Also check the account age. Accounts set up with a false older age silently switch off protections platforms apply automatically to children.

How to raise it

Not as a security briefing. Try: what are the things you would only tell people you actually trust?

Let them build the list. They will get most of it right, and a list they wrote is one they will keep.