Companies collect data about what you view, like and search for, and use it to show specific ads. Algorithms are computer programs that recommend content based on what you have watched before. Shocking content designed to make you angry or scared is often made for clicks, not because it is true. Not everything online is true: people can post false or misleading things, and misinformation can spread. A website can look credible but still be misleading, and judging a site by its looks alone can fool people. A good first step with a surprising post is to stop and notice how it makes you feel before sharing it.

Deepfakes are fake images, videos and audio made with AI that can look and sound like a real person. If someone shares an embarrassing or inappropriate image claiming it is you, tell a trusted adult. It should be reported to the site. Look at the link you are about to click: a link that does not match its text may be a fake. Fake Wi-Fi hotspots can copy the name of a real one, so ask the place for its exact Wi-Fi name. A private message or photo meant for friends can easily be made public or altered. Posted information can survive removal, because saved or cached copies may still exist on other people's machines.

Think before you post: if you feel upset or angry, wait, because people do not always make good decisions when stressed. As of November 2026, companies and schools sometimes look up applicants online, so what you post can matter later. Most people are judged on authenticity, not perfection. You can manage your digital footprint by limiting or deleting data browsers hold, deleting old accounts, and using private browsing. Searching your own name, then discussing what strangers could find, is a way to check your footprint. A self-audit means looking over your profiles from time to time and removing posts that no longer fit your values.

Private details you should keep off public view include your full name, current location, home and school addresses, phone numbers and passwords. Most trustworthy people and companies do not ask for private information online, so a request for it is a warning sign. Do not give an app more access than it needs: review permissions for contacts, camera, storage, location and microphone. Before installing an app, read its privacy policy, and be wary if it is vague about who gets your data or asks for excessive permissions. Signing in to an app with a social network account can let the app collect information from that account. Privacy settings let you choose who can see your profile and posts.

Cookies are small bits of data a website saves in your browser, for example to remember your login. Cookies can be misused to link your visits and searches together, which is a privacy concern. Browsers let you block, limit or delete cookies. When a site asks you to accept cookies, you can choose to accept only the necessary ones. The default settings on some sites let anyone see your profile, and you can change them to limit who can. Most apps and games have privacy settings, such as making an account private or turning off location sharing. Some apps can see where you are, so check each app's location setting.

Phishing is a form of social engineering: attackers use people's trust, rather than computer flaws, to get information. Attackers use news events and times of year, such as holidays or disasters, to make their messages look timely. Texting scams are called smishing and voice-call scams are called vishing, and both are kinds of phishing. Caller ID can be spoofed, so a call that seems to come from a trusted number may not. Poor spelling used to be a clue to a scam, but scams are getting smarter and some even fool experts, so do not rely on spelling alone. A message that pushes you to act right away, with warnings about what happens if you do not, is a common sign of phishing.

A real bank will never ask you to confirm your account details by email or a phone call it started. Scammers try to quickly gain trust and pressure you into acting without thinking. If a message is suspicious, stop and break contact. If you think a message might be a scam, do not click its links or open its attachments. If a suspicious message could be real, look up the company's real contact details yourself instead of using the ones in the message. Reporting scam messages helps reduce how many you receive and protects other people.

Text can be hard to read: something meant as a joke can look like an insult online. Do not post comments, videos or photos that might hurt or offend someone, and ask a trusted adult if you are unsure. If you see someone being cyberbullied, do not join in and do not stay silent: tell an adult. If someone is unkind to you online, the first step is to tell an adult you trust. If something online upsets a friend, help them and speak up to a grown-up you trust. If something online makes you feel sad, scared or confused, tell a trusted grown-up. Telling a grown-up about something that worried you online is the right thing to do, and you should not be in trouble for telling.

Words to know

• algorithms: recommending programs
• deepfakes: fake AI media
• cookies: saved data bits
• permissions: access requests