The Big Idea
If someone asks you your first name, that's fine — everyone knows first names. If they ask your first name and what school you go to and what street you live on — now they know a lot more than you intended to share.
The lesson at ages 7–9 isn't "never share anything." It's this: information combines. One piece is usually fine. Multiple pieces together can give someone you've never met offline a lot of information about your real life.
This activity will help you understand which combinations are safe — and which ones to pause before sharing.
Same Information, Different Combinations
Here's how the same information can feel very different depending on what else is shared at the same time.
First name only.
Name + school.
Name + school + location + routine.
Notice that Jordan never meant to share their whole daily schedule. But when pieces stack up, a picture forms that Jordan didn't intend to create.
What to Share, What to Protect
This isn't about secrets — it's about knowing which things belong to everyone and which things belong to your real life.
- Your full name (first + last together)
- Your school name or teacher's name
- Your home address or street
- Your phone number
- Your daily routine (where you go, when you're alone)
- Passwords to any account
Biggest thing to remember: It's not one piece — it's combinations. First name alone is fine. First name + school + street is a lot.
If You Already Have Accounts
Many children in Grades 2–4 already play Roblox, Minecraft online, or use other apps where other people can see a profile or username. That's the reality — and this activity is for you too.
Look at your username and profile together with your caregiver. Ask: Does your username include your real name? Does your profile say what school you go to or where you live? What would someone know about you just from looking at your profile?
Don't have any accounts yet? That's fine too — this activity still applies. When you do set up an account someday, you'll already know what to keep private.
The Sorting Game
Read each scenario with your caregiver. For each one, talk about whether it's "Usually fine," "Pause and think," or "Protect this." There's no timer — take your time.
Online-Only Friendships
Sometimes you meet people online — in a game, in a fan group, or in a comment section — who seem really friendly. Most of the time, that's just people being nice online. And it's OK to be friendly back.
Every now and then, someone online will try to become a trusted friend before asking for personal information. This doesn't mean everyone online is a stranger to be afraid of — the vast majority of online spaces are fine. But it's one reason the combination rule matters: share what's normal online, protect what belongs to your real life.
The simple test: "Would a stranger knowing this help them find me in real life?" If yes — that's something to protect. If no — you're probably fine.
Talk About It Together
There are no wrong answers — just interesting ones.
- Look at something you use online together. What does your profile or username tell a stranger about you? What would you change?
- What's the difference between a "game friend" and a real-life friend? Does that change what you'd share with them?
- If you combined your first name, your school, and a photo of yourself — could someone you'd never met in real life find you in real life? Does that feel like too much?
- Is there anything you've shared online before that you'd do differently now?
You understand that one piece of information is usually fine — and that combinations are what matter. That's a grown-up kind of thinking.
Signs It's Working
- Your child can name the "combination rule" — that single pieces are usually fine but stacking them creates risk.
- They can distinguish between a display name and their real name without prompting.
- If they already have accounts, they can look at their own profiles with a critical eye.
- They understand online friendships exist on a different spectrum from offline friendships — and that's OK — without being afraid of all online interaction.
🧑🤝🧑 Caregiver Notes & Sources
What this activity builds
The "combination rule" is a developmentally appropriate upgrade from the 4-6 age band's binary "share / don't share" framework. Children aged 7–9 are capable of understanding that context modulates risk — this is the foundational skill for all digital privacy reasoning they'll need as they get older.
Acknowledging account reality
The combination lesson
Variant prompts for group settings
Avoiding overcorrection
Privacy activities at this age can produce one of two failure modes: children who share everything, or children who are afraid of all online interaction. Neither is the goal. The "combination rule" thread throughout this activity is designed to produce nuanced judgment — most things are fine to share; certain combinations create risk.
Sources
- Childnet International (2021). SMART Rules for Online Safety. childnet.com
- Cybertip.ca / Canadian Centre for Child Protection (2024). Online safety and grooming awareness. cybertip.ca
- Privacy Commissioner of Canada (2021). PIPEDA and children's privacy. priv.gc.ca
- Finkelhor, D. (2012). Crimes against Children Research Center: Online victimisation risk factors. CCRC.
- MediaSmarts Canada (2022). Digital literacy framework for elementary learners. mediasmarts.ca