Oversharing: Teaching Kids What Not to Post

No single post is the problem. That is what makes this hard to explain to a child, and easy for adults to sound paranoid about.

A photo in school uniform. A story tagged at the local park. A comment mentioning the walk home. A birthday post. Individually each is completely harmless, and treating any one of them as a crisis will lose you the argument.

Together they are a map: which school, which route, what time, what your child looks like, who their friends are, when the house is empty. Nobody assembled it deliberately. It assembled itself.

That is the idea worth teaching — aggregation — and children generally grasp it quickly once it is named, because it is not obvious and it does not sound like a lecture.

1. Location off, everywhere

Geotags and check-ins broadcast exactly where a child is, in real time. Turn off location tagging in each app, and revoke the operating-system location permission for social and camera apps.

Do the OS-level version. An in-app toggle can be reset by an update; a permission you revoked cannot be quietly re-enabled.

Two less obvious leaks worth mentioning: photos can carry location data in their metadata even without a visible tag, and a recognisable background — a school gate, a street sign, a shop front — locates a photo perfectly well without any technology at all.

2. Private accounts, and an honest definition of "friend"

Public profiles are searchable by anyone. Private is the baseline.

The harder conversation is what "friend" should mean. Many teenagers accept follows from people they have never met, because a follower count is a form of currency. A useful question, asked without judgement: "Of the people who can see this, how many would you recognise in the street?" That usually does more than a rule.

3. The front door test

A simple gut-check that children remember: "Would I be happy if this were taped to the front door of the school, with my name on it?"

It works because it is concrete and because it captures the right thing — not "is this embarrassing" but "am I comfortable with everyone I know, and some people I don't, seeing this attached to me." School uniform, home details, daily routines and anything shared in anger tend to fail it.

4. Viral quizzes are security questions

"Your first pet's name + your street = your elf name." "Comment the town you were born in."

These are entertaining, and they harvest precisely the fields used as password-reset answers. Explaining the mechanism — "those are the actual questions your bank asks to prove it's you" — works far better than a ban, because it is interesting and it generalises.

The same applies to those posts asking for a graduation year, a first car, a mother's maiden name.

5. Manage the footprint together

Every few months, search your child's name and usernames together and look at what comes back. Untag, delete, tighten.

Frame it as their reputation to manage, not your inspection. A teenager who understands that a footprint follows them into job applications and university places has a real reason to care, and it is one that outlasts your supervision.

The one that gets missed: your own posting

Parents build a substantial part of a child's digital footprint before the child has any say.

First-day-of-school photos with the school name visible, birthday posts confirming an exact date of birth, holiday updates announcing an empty house, and years of images posted publicly by an adult who never asked. Some children reach adolescence and find their entire childhood already published.

Worth applying the same tests to your own accounts — and, once a child is old enough to have a view, asking before posting about them. It also makes the conversation far easier, because you are not asking them to follow a rule you ignore.

Cleaning up what is already there

If the footprint already exists, it is not too late and it does not require perfection.

• Audit the obvious first. Public accounts, tagged photos, old posts with location data, abandoned accounts from years ago.
• Prioritise anything identifying — school, home, routine, full date of birth.
• Ask friends and family to remove specific posts. Most people say yes.
• Accept that some of it will persist. Screenshots exist. The aim is reducing the surface, not achieving zero.
• Do it with your child rather than to them. A clean-up conducted behind a teenager's back teaches exactly the wrong lesson about who owns their online presence.

What this protects against, honestly

Aggregated personal information mainly enables three things: being located by someone who should not know where your child is, social engineering — of your child, or of you, using details that make a stranger sound credible — and future reputational cost from content posted at fourteen and read at twenty-two.

It does not protect against bullying by people already inside the circle, which is where most harm actually originates. For that, see cyberbullying. Nor does it substitute for the privacy settings checklist, which controls who is in the circle in the first place.

How SmartProtect fits

There is no setting that teaches judgement, and we would be overselling to claim otherwise. What helps is that these conversations happen openly — a child who knows what limits exist and why is in a discussion about their own online presence, rather than being managed around one. That principle is set out in monitoring vs spying.

Key takeaways

• Aggregation is the risk, not any single post. Teach that idea by name.
• Revoke location at the OS level, and watch for metadata and recognisable backgrounds.
• The front door test is the rule children actually retain.
• Viral quizzes harvest security answers. Explain the mechanism rather than banning them.
• Audit your own posting too — parents build much of the footprint first.
• A clean-up is worth doing, imperfectly, and with your child rather than behind them.