High School BeginnerModule B6Lesson 4 of 7

B6.4 Privacy Settings and Audience Control

Learn how account discovery, profile visibility, post audiences, tags, messages, and location controls shape who can find, view, and interact with your digital identity.

Lesson Progress

Privacy Settings and Audience Control

High School BeginnerB6: Digital Identity and Privacy • Lesson 4 of 7

57% complete

Readiness Check

Before You Start

0/3 ready

Professional Hook

Privacy Settings Work Like Access Controls

Defenders do not give every person access to every system. They decide who needs access, what they need, and when they need it. Privacy settings apply the same idea to digital identity. Discovery, profile, audience, tagging, messaging, and location controls each create a different boundary around information and interaction.

Safety reminder: never share real passwords, private messages, exact locations, or personal account details in a training activity. Ask trusted adults, teachers, guardians, or school technology staff when something feels unsafe.

Learning Objective

Explain how account, profile, content, and interaction controls protect different parts of digital identity.

Learning Objective

Choose an audience based on purpose, sensitivity, and the smallest group that needs access.

Learning Objective

Review fake privacy settings and identify choices that create unnecessary exposure.

Why This Matters

A Wider Audience Creates More Exposure

A single post may reveal more than the creator expects. School names, uniforms, routines, locations, usernames, friend lists, event details, and background images can combine into a larger picture. Privacy settings reduce exposure by limiting who can find, view, contact, tag, or interact with the account.

Visual Diagram

Four Layers of Privacy and Audience Control

A private account is only one layer. Students should review discovery, profile visibility, content audiences, and interaction controls because each layer protects a different part of digital identity.

1

Account discovery

Controls who can search for the account, find it through contacts, or receive account suggestions.

2

Profile visibility

Controls who can see profile photos, bios, school details, links, activity, or follower lists.

3

Content audience

Controls who can view posts, stories, videos, comments, shared files, or temporary content.

4

Interaction controls

Controls who can message, comment, tag, mention, invite, follow, or send requests.

Defender rule: choose the smallest reasonable audience, verify the setting before sharing, and remember that approved viewers may still copy or reshare content.

Core Concept

A Private Account Is Only One Layer

Making an account private can help, but it does not automatically fix every setting. Profile details may still be visible, approved followers may still save content, tags may appear automatically, and connected apps may still have permissions. A safer privacy review checks every layer instead of relying on one switch.

Key Vocabulary

Terms for Privacy and Audience Thinking

Privacy setting

A control that changes who can find, view, contact, tag, mention, or interact with an account or piece of content.

Audience

The group of people allowed to view a profile detail, post, story, video, message, or other shared content.

Default audience

The audience automatically selected when a new post or piece of content is created.

Custom audience

A selected group of people who are included in or excluded from seeing certain content.

Discoverability

How easily an account can be found through search, suggestions, contacts, usernames, links, or connected services.

Tag review

A setting that allows a user to approve certain tags before they appear on the user’s profile.

Technical Breakdown

Audience Review Board

Privacy controls are not about hiding everything. They help students match access to purpose, reduce unnecessary exposure, and keep control over who can interact with their digital identity.

Posts and stories

Ask first

Who genuinely needs to see this content, and could it reveal location, schedule, identity, or private context?

Safer choice

Use an approved audience and check the setting before every important post.

Tags and mentions

Ask first

Can other people attach my account to content without my review?

Safer choice

Turn on review controls when available and remove unwanted tags safely.

Messages and comments

Ask first

Who can contact or interact with the account, and are blocking and reporting tools available?

Safer choice

Limit interactions to appropriate audiences and use safety tools when needed.

Location sharing

Ask first

Does this post or feature need precise or live location information?

Safer choice

Keep location off by default and share only when there is a clear, trusted reason.

Fake Dashboard

StudentHub Privacy Review Panel

This fictional dashboard shows how students can review settings without entering real account details or opening a real suspicious service.

Fake Data

Default post audience

Currently set to Public

High priority. Change to an approved audience unless there is a clear reason to share publicly.

Story audience

Currently set to Close Friends

More limited, but still review who is included and remember that viewers may save or reshare content.

Tag approval

Currently turned Off

Turn on review when available so unexpected tags do not automatically appear on the profile.

Direct messages

Currently set to Friends Only

A limited audience can reduce unwanted contact. Keep reporting and blocking tools easy to find.

Location sharing

Currently allowed in every post

Disable by default. Share location only when there is a clear, safe purpose and trusted approval.

Fake Dashboard

Fake Privacy Signal Dashboard

Training dashboard using fictional account settings to practice safe audience-control decisions.

Public defaults

2

Posts and location sharing need immediate review.

Review controls

1

Tag approval is available but currently turned off.

Limited settings

2

Stories and messages already use smaller audiences.

Fake SOC Alert

Public Default Audience Detected

Source: Fake Privacy Settings Training • Time: 1:42 PM

Medium Severity
A fictional student account is private, but the default audience for new posts is still set to Public and location sharing is enabled.
Defensive recommendation: Change the default audience to an approved group, disable unnecessary location sharing, and review older posts that may use the same settings.

Fake Log Panel

Fake Privacy Settings Review Log

training-log-viewer.log
13:36:12 ACCOUNT_SETTING account_visibility='private' review='helpful but not complete'
13:37:05 POST_DEFAULT audience='public' review='change to approved audience'
13:38:14 STORY_DEFAULT audience='close_friends' review='check membership regularly'
13:39:20 TAG_REVIEW status='disabled' review='enable when available'
13:40:43 LOCATION_SHARING status='always_on' review='disable by default'
13:42:09 SAFE_ACTION recommendation='use smallest necessary audience and review old content'

Training note: this is fake data for defensive analysis practice only.

Analyze the Evidence

Which Setting Needs the Most Immediate Attention?

A fictional account is set to Private.
The default audience for new posts is Public.
Direct messages are limited to approved friends.
Tag review is turned on.

What is the safest conclusion?

Common Mistakes

Mistakes That Weaken Audience Control

Assuming that making an account private automatically protects every profile field, post, tag, message, or connected app.
Leaving the default post audience set to Public and planning to change individual posts later.
Accepting follow or friend requests only because the account has mutual connections.
Allowing tags, mentions, comments, or direct messages from everyone without reviewing the purpose.
Sharing exact locations, schedules, uniforms, tickets, IDs, or travel plans with a wider audience than needed.
Believing temporary or deleted content can never be copied, screenshotted, recorded, or reshared by another viewer.

Safe Defensive Lab

Review a Fake Student Account

Fake Account Scenario

StudentHub Privacy Setup

A fictional student account uses a private profile, public posts, open tagging, friends-only messages, and automatic location sharing. The student wants classmates to see club updates but does not want strangers to track routines or contact the account.

Defensive Review Steps

  • Match each audience to the real purpose of the content.
  • Change public defaults to approved audiences.
  • Turn on tag or mention review when available.
  • Disable location sharing unless it has a clear safe purpose.
  • Review old posts and use trusted help for unsafe interactions.

Scenario Decision Lab

A Team Photo Includes More Than Expected

A fictional student wants to post a team photo. The image includes school uniforms, a visible practice location, and several students who have not been asked whether they want the photo shared.

Defender Habits

Privacy Settings and Audience Control Checklist

Check Your Understanding

B6.4 Mini Quiz: Privacy Settings and Audience Control

Choose your answers first. Explanations appear only after submission.

1. Which setting most directly controls who can see a new post?

2. Why should a student review the default audience before posting?

3. What is the safest beginner choice when tag review is available?

4. Which action best follows the smallest-necessary-audience rule?

5. What is an important limitation of privacy settings?

Portfolio Prompt

Portfolio Prompt

Create a short fake privacy review for a fictional high school account. Explain the current discovery, profile, post, tagging, messaging, and location settings. Recommend safer defaults and explain why each change reduces unnecessary exposure.

Use fake account names and fake details only.
Separate account visibility from individual content and interaction settings.
End with a simple monthly privacy-review routine.

Key Takeaways

What You Should Remember

1.Privacy settings create separate boundaries for discovery, profile visibility, content, and interactions.
2.A private account does not automatically make every post, tag, message, or permission private.
3.The safest audience is usually the smallest group that genuinely needs the information.
4.Location, tagging, messaging, and old-content settings deserve regular review.
5.Privacy controls reduce exposure, but approved viewers may still copy or reshare content.

Navigation

Continue Module B6