Education sites collect data from children

An investigation by Human Rights Watch showed that some Brazilian online education tools collect data from children, monitoring minors in virtual classrooms and tracking their internet browsing. The organization, which carries out studies in defense of human rights, carried out the analysis in 2022 and a review of the data in January of this year. In all, eight sites that collect data were discovered, two created by the Departments of Education of São Paulo and Minas Gerais. Some sites deny that the data was sent to third-party companies and others did not return to the report.

>> Be part of the Life and Citizenship channel on Telegram

Of the total, seven sites sent data on children and adolescents to third-party companies, using tracking technologies designed for advertising: Estude em Casa, Centro de Mídias da Educação de São Paulo, Descomplica, Escola Mais, explicaê, MangaHigh, Stoodi. The eighth site, Revisa Enem, sent the data, but without using specific ad trackers.

The data from the seven sites, in the hands of companies specialized in behavioral advertising, can guide different virtual marketing actions. Organizations are able to analyze student data, predict what they might do next on the internet or how they might be influenced. Advertisers can also use the information and target more personalized content, such as advertisements that minors will see on the internet.

Recordings and logging of keystrokes to capture text

When analyzing the website developed by the State Department of Education of Minas Gerais, Estude em Casa, to offer free education during the pandemic through video classes, Human Rights Watch found that the website collected and sent the information through tracking technology.

The São Paulo Education Media Center, developed by the São Paulo State Department of Education, which also offered classes during the pandemic, used four ad trackers to send data to two third-party companies.

One of the largest teaching platforms, Descomplica, was also analyzed by the human rights organization. The site sent user data to 20 companies through 30 ad trackers and 19 third-party cookies that track users across the internet. Most of these companies use the information to direct behavioral advertising to people while they browse the online environment.

The Descomplica website would also have used recordings to record what users did in the tool and sent the record to third-party companies. Human Rights Watch analyzed the company again late last year and in January this year found that the site sent data to 26 companies through 37 ad trackers and 39 third-party cookies.

Other sites investigated are DragonLearn and Escola Mais. According to the organization, in May 2022, both sent data to 6 companies. As well as explicaê, it also forwarded the information to five companies. The DragonLearn tool used recordings to record what users did on the site. Escola Mais, in November last year, started sending information to 37 companies, according to Human Rights Watch.

Revisa Enem, Stoodi and MangaHigh also sent user information to third-party companies. Stoodi, in addition to using recordings to record what users did, also recorded keystrokes to capture typed text before submitting. According to Human Rights Watch, the same site sent the recordings to an advertising company.

The same thing that happened to Stoodi was analyzed on the MangaHigh website, which offers educational math games. In May 2022, the tool used 11 ad trackers to send to 4 companies. Recordings and keystrokes were also recorded to capture the texts. According to the analysis, as of November 2022, the site no longer uses session recording, but continues to record keys and Google Analytics “remarketing audiences”.

Other side

The Secretary of Education of Minas Gerais informed Gazeta do Povo that the site “does not use or collect student data, as it does not require any type of login to access the platform” and that the tool does not put user data at risk. “Right technical analyses, tracking and adjustments are constantly carried out, if necessary, on the online platforms used by the folder”. The Secretariat informed that the entire process is also carried out in dialogue with Human Rights Watch, which continues to advise SEE/MG in maintaining virtual protection.

The website explicaê replied that “all tools used are solely and exclusively to provide a better experience for our users and no data is shared with third parties”. “No data, be it telephone or email, is collected without the permission, knowledge and acceptance of the Terms of Use and Privacy Policies, by the platform user”, he informed.

The Stoodi tool did not return to the report, but acknowledged the analysis findings to the organization that did the investigation and stated that the data practices were to improve the user experience. It also claimed that the users were over 16 and that it did not sell personal data to third parties.

The São Paulo State Department of Education, MangaHigh, Escola Mais, Revisa Enem and Descomplica did not respond to questions from Gazeta do Povo and Human Rights Watch. The DragonLearn website also did not respond, but it was taken off the internet following the investigation, according to Human Rights Watch. The space is open for the return of the investigated sites.