Module 9: Privacy, Digital Footprints, and Algorithmic Profiling

Step 1 – Your Digital Footprint: More Than Just Posts

When you think of your online presence, you probably think of:

• Your posts
• Your comments
• Your photos and videos

But your digital footprint is much bigger. It includes:

1. Active data – things you choose to share

• Posts, likes, comments
• Profile info (bio, age, school, interests)
• Videos, stories, lives, podcasts

1. Passive data – things collected about you in the background

• What you click on and how long you look at it ("dwell time")
• Which ads you scroll past vs. tap
• Your device type, browser, screen size
• Your approximate location (from IP address or GPS, if allowed)

1. Derived data – things platforms guess about you

• Your interests (e.g., "likes anime", "into fitness")
• Your life stage (e.g., "student", "new driver")
• Your likely income level or spending habits

Platforms combine all three to build a persistent profile of you, even if you:

• Delete some posts
• Switch devices
• Use multiple social media accounts

This matters for you as a brand-builder because:

• Your public content shapes how people see you.
• Your hidden data shapes how algorithms treat you.

In this module, you’ll learn how that hidden part works and how to protect yourself without disappearing online.

Step 2 – How Little Data Can Uniquely Identify You

Most people think: “I’m just one of millions of users. I’m anonymous.” In reality, very small pieces of data can single you out.

Researchers and privacy regulators have shown that:

• A few location points can often identify one person in a city.
• A short list of visited websites can be as unique as a fingerprint.

Example: Browser & device fingerprinting

When you visit a website, your browser normally sends technical details like:

• Browser type and version (e.g., Chrome 121)
• Operating system (e.g., Windows 11, iOS 18)
• Screen size and language
• Time zone
• Installed fonts or plugins (in some cases)

On their own, each detail seems harmless. But combined, they can be highly unique.

Think of it like this:

• A blue hoodie? Not unique.
• Size M? Still not unique.
• Blue hoodie + size M + custom print + small tear on the left sleeve? Now it’s probably just you.

Key point: Even if you never type your name, your technical and behavioral patterns can still identify and re-identify you across sites and apps.

Step 3 – Re-Identification in Real Life

Let’s walk through a realistic scenario.

Scenario: “Anonymous” browsing isn’t really anonymous

You:

• Use an incognito window to read about scholarships.
• Visit a few sites about study tips and exam stress.
• Watch videos about moving abroad for university.

You don’t log in. You don’t type your name.

But the ad and analytics systems can still:

• See your IP address region (e.g., your city or nearby area)
• See your device + browser fingerprint
• Track which pages you visit and for how long

Later, when you log into a social platform on the same device:

• The platform can often link your earlier “anonymous” activity to your logged-in profile (through cookies, device IDs, or similar techniques).
• Suddenly, your feed is full of:
• University ads
• Exam prep tools
• Mental health resources

This is called re-identification: connecting data that seemed anonymous back to a real person.

Why this matters for your brand and privacy:

• Your private research (e.g., about health, money, or personal issues) can quietly influence the ads and content you see.
• That, in turn, can affect your mood, decisions, and even what you choose to post publicly.

Step 4 – Algorithmic Profiling: How Platforms Guess Who You Are

Every major platform today (social media, streaming, shopping) uses algorithmic profiling.

Algorithmic profiling = using data + algorithms to build a model of who you are and what you’ll do next.

Platforms use signals like:

• What you watch or read to the end
• What you scroll past quickly
• What you like, share, comment on
• What times of day you’re active
• The topics in your posts and captions
• Who you follow and who follows you

From this, they infer attributes such as:

• Interests (e.g., gaming, politics, K‑pop)
• Personality traits (e.g., risk-taking, anxious, social)
• Life events (e.g., exam season, breakup, moving house)

These inferences can be very sensitive, even if you never say them out loud.

For example, research published in the mid‑2010s and built on since then showed that Facebook likes alone could predict:

• Political leanings
• Personality type
• Relationship status
• Possible sexual orientation

Today, platforms and ad networks combine even richer data:

• Video watch history (including short-form videos)
• Search history within apps
• Purchase and in‑app spending data

Result: You don’t just have a profile; you have a predicted version of yourself living inside multiple algorithms.

Step 5 – What Could Algorithms Infer About You?

Activity: Imagine a platform only knows the following about a user over the last 2 weeks:

• Watched several videos about:
• Late-night study routines
• Dealing with exam stress
• Comparing universities in different countries
• Clicked on:
• Ads for language tests
• A financial aid calculator
• Follows:
• 3 study influencers
• 2 mental health accounts

Question 1 (self-reflection):

• What 3 things could an algorithm reasonably guess about this person? Write them down.

Possible inferences (compare with your list):

• They’re likely a student, probably in high school or early university.
• They may be stressed or anxious about exams.
• They’re considering studying abroad and worried about money.

Question 2 (self-reflection):

• If this were you, how could these inferences affect:
• The ads you see?
• The content recommended to you?
• How you feel about your own situation?

Write 2–3 bullet points for yourself.

This is how algorithmic profiling silently shapes your online experience.

Step 6 – Personalization vs. Manipulation

Personalization isn’t always bad. It can:

• Show you content that matches your goals (e.g., scholarships, study tips, portfolio ideas)
• Help your personal brand reach people who care about your niche

But there are risks when profiling goes too far:

1. Filter bubbles

• You mostly see content that confirms what you already think.
• You rarely see new perspectives.

1. Emotional targeting

• If algorithms think you’re stressed, lonely, or insecure, they may show content or ads that keep you in that emotional state because it makes you engage more.

1. Sensitive inferences

• Algorithms may infer things about your health, sexuality, religion, or politics, even if you never say them.
• In regions like the EU and UK, laws such as the GDPR (in force since 2018) and the newer EU Digital Services Act (fully applicable since 2024) try to limit some of the most invasive uses of this kind of data—especially for minors—but enforcement is still catching up.

1. Profiling for high‑stakes decisions

• In some systems, algorithmic profiles can influence decisions about credit, insurance, or job ads.

Key idea for you:

You want useful personalization (e.g., relevant audiences for your content) without becoming easy to manipulate. That means managing what you share and where you share it.

Step 7 – Balancing Visibility, Privacy, and Safety

You’re building a visible personal brand (from Modules 7 and 8), but you also want privacy and safety.

Think of your online life as having three layers:

1. Public layer (for your brand)

• What you want to be known for: your skills, projects, interests, and values.
• Examples:
• A portfolio account
• A professional TikTok or Instagram
• A LinkedIn profile

1. Controlled layer (for close circles)

• Private or close-friends stories
• Group chats
• Accounts under your name but with tighter privacy settings

1. Protected layer (for you only)

• Sensitive topics: health, finances, family problems, mental health crises, exact daily location
• This layer should not be easily linked to your real name or public accounts.

Goal:

• Keep your public layer strong, consistent, and professional.
• Keep your protected layer small, and share those details only where you trust the space and understand how the data might be used.

Step 8 – Map Your Own Three Layers

Take 3–5 minutes to sketch your layers.

1. Public layer – Brand-facing

Write down:

• Which accounts are meant to show your skills and goals? (e.g., @yourname.design, YouTube channel, LinkedIn)
• What 3–5 topics you are okay being permanently linked to your name? (e.g., coding, art, environmental activism)

2. Controlled layer – Semi-private

Write down:

• Which accounts or spaces feel more personal but still connected to your real identity? (e.g., private Instagram, Discord with classmates)
• What are you currently sharing there that you might regret if it leaked? (e.g., screenshots, drama, detailed location)

3. Protected layer – Sensitive

Write down (privately, just for you):

• Topics you want to keep off your public brand (e.g., certain health issues, family conflicts, exact home address).
• Where you currently discuss them (e.g., DMs, anonymous forums, journaling apps).

Finally, star (*) any item that you realize should move:

• From public → controlled
• From controlled → protected

This is your first draft of a personal data boundary map.

Step 9 – Practical Ways to Reduce Unnecessary Data Exposure

You don’t need to vanish from the internet. You just need to be intentional.

Here are concrete steps you can start using today:

1. Separate “brand” and “everything else”

• Use one main account (under your real name) for your portfolio and professional content.
• Keep more personal accounts:
• Under stricter privacy settings, and/or
• Under a handle that isn’t easily searchable by your full name.

2. Tame tracking and ad profiling

• Regularly clear cookies or use browser profiles for different purposes (school vs. personal vs. brand work).
• On major platforms, visit Ad Settings and:
• Turn off or limit “personalized ads based on activity from other websites/apps” where possible.
• Turn off sensitive categories if shown.
• On your phone, check app permissions:
• Disable location for apps that don’t truly need it.
• Limit microphone/camera access to when you’re actually using them.

3. Be careful with “login with X” buttons

• When you use “Continue with Google/Apple/Facebook”, you make it easier to link your behavior across apps.
• For sensitive apps (mental health, money, personal diaries), consider email + strong password instead.

4. Think twice before posting real-time location

• For public accounts, avoid posting where you are *right now*.
• Post locations after you leave.
• Avoid showing your school, home address, or daily route in recognizable detail.

These small habits significantly reduce how much detailed, linkable data exists about you.

Step 10 – 5-Minute Privacy Tune-Up Checklist

Use this quick checklist on one device (your phone or laptop). You can do the others later.

On one social platform you use a lot:

1. Open Settings → Privacy / Safety / Ads.
2. Change at least 2 settings to be more privacy-friendly. For example:

• Make your friends list / follower list private or limited.
• Turn off ad personalization based on off-platform activity (if available in your region).
• Limit who can comment or message you directly.

On your browser:

1. Check if you have “Do Not Track” or similar privacy options and turn them on if available (note: not all sites obey this, but it helps).
2. Clear browsing data for cookies and cached files (at least for the last 7 days).

On your phone:

1. Open Settings → Privacy → Location Services / App Permissions.
2. Change at least 1 app from “Always” or “While Using” to “Never” if it doesn’t truly need your location.

Write down one habit you will keep from this checklist (e.g., “I’ll review my ad settings once a month”).

Step 11 – Quick Check: Profiling and Privacy

Answer this question to check your understanding.

Step 12 – Key Term Flashcards

Flip through these cards to review the main ideas from this module.