Digital Safety Curriculum

Participants learn why using a primary email on dating apps and new contacts creates identity exposure — and how to create a protected secondary address that keeps their real inbox private.

• Why your email address is an identity anchor (cross-site lookups, breach databases)
• Creating a Proton Mail account — step by step, no personal info required
• Using SimpleLogin to create forwarding aliases for different apps
• When to give a real email vs. when to use a throwaway
• How to spot if someone is trying to link your accounts through your email

A real phone number reveals location (area code), can be reverse-searched, and ties to your carrier identity. Participants set up a free secondary number before giving it to someone new.

• What a phone number reveals: carrier, approximate location, linked accounts
• Setting up Google Voice — free US number, works from any device
• TextNow as a backup if Google Voice isn't available
• Using a temp number on dating apps vs. giving real number directly
• When it's safe to share a real number and what that milestone should look like

Catfishing and romance fraud often use stolen profile photos. This module teaches participants to quickly verify whether a photo is real using free tools — before they invest emotionally or financially.

• What catfishing is and why it happens (money, data, manipulation)
• How to save a profile photo and run a reverse image search
• Using Google Images and TinEye — hands-on practice with example photos
• Red flags when a match refuses photos or video calls
• What to do if a photo comes back as stolen (report, block, document)

The most common way people are located, stalked, or manipulated online is through information they shared voluntarily at the wrong time. This module maps what's safe at each stage of trust.

• Information that reveals your home location without you realizing it: gym name, coffee shop, nearby school, car make/model, background details in photos
• Employer and workplace as a locator: why sharing it too early creates real risk
• The trust ladder: what's appropriate to share at each stage (stranger → acquaintance → trusted connection)
• Social media cross-referencing: how combining a first name, school, and photo can locate someone in minutes
• Group exercise: review a fake dating profile and identify what it reveals

Most dating apps share more data than users realize. This module walks through privacy controls on the most common platforms — Tinder, Bumble, Hinge — and what each setting actually does.

• Location precision: why "nearby" can narrow you to a few blocks and how to limit it
• Who can see your profile: strangers vs. mutual matches vs. everyone
• Photo metadata: do dating apps strip EXIF location data? (Answer varies by platform)
• Third-party data sharing: what apps send to advertisers and how to opt out
• How to delete an account vs. just uninstalling the app — they're different

Some people on dating apps aren't looking for relationships — they're collecting personal data for scams, blackmail, or stalking. This module teaches participants to recognize the patterns.

• The information funnel: how abusers gather details progressively to build leverage
• Early red flags: excessive questions about schedule, location, work, finances
• Photo requests as a manipulation tactic: escalation patterns and what to do
• Romance scam patterns: urgency, financial requests, can't meet in person
• What to do if you think you're being harvested: document, disengage, report
• Reporting to the FTC and IC3 (both free): walkthrough

A new email address is the foundation of a digital fresh start. This module covers how to create one safely — on a device the abuser has never touched.

• Device safety first: never create a new account on a shared or monitored device
• Safe devices to use: library computer, shelter computer, a trusted friend's device
• Creating Proton Mail: no personal info required, encrypted, Switzerland-based
• Choosing a username that doesn't reveal real identity or location
• Clear browser history and sign out immediately after setup on shared devices
• Never access the new email from a device the abuser can see

A shared family plan number is visible to the account holder. This module covers getting a free independent number without the abuser knowing.

• Why a shared carrier plan isn't safe: call logs, texts, and location are visible to plan owner
• Google Voice: free US number, requires only a Google account, works from any device
• TextNow: alternative if Google isn't available, provides a real number for calls and texts
• Using the new number only from a safe device
• Giving the new number to emergency contacts, employer, and school (not the old shared number)

Abusers track location through apps, device features, and physical trackers. This module covers all three — and how to check for and disable each.

• App location sharing: check every app on the phone — Find My, Google Maps sharing, Snapchat, Life360, Facebook Messenger, WhatsApp
• How to revoke location access per-app on iOS and Android
• Apple AirTags: how abusers plant them on cars, bags, and coats — how to find them
• iPhone: AirTag scanning is built in — check Unknown Accessories in Settings
• Android: download Tracker Detect from Google Play — free, from Apple
• Physical sweep: check wheel wells, under bumpers, in bags, jacket pockets
• iCloud "Share My Location": how to turn it off without the other person getting a notification

Shared or formerly shared devices may have monitoring software installed. This module helps advocates assess whether a device is safe — and what to do if it isn't.

• Signs a device may be monitored: battery drains fast, phone feels warm when not in use, data usage is unusually high
• Common monitoring apps: mSpy, FlexiSpy, Cerberus, built-in parental controls used on adults
• Factory reset: when it helps and when it doesn't (deep install can survive factory reset)
• Safest option: use a new device the abuser has never touched. Prepaid phones are available at most dollar stores and Walmart for under $30
• Do not install new apps on a potentially monitored device — the abuser may receive an alert
• If a new device isn't possible: assess specific apps and permissions; contact the National DV Hotline's tech safety team

Shared accounts — streaming, banking, cloud storage, email — give abusers ongoing access and visibility after separation. This module covers the full account separation checklist.

• Create a new Google or Apple ID on a safe device (use the new email from Module 1)
• Change passwords on all personal accounts: email, banking, social media, phone carrier
• Use Bitwarden (free, open source) to store new passwords securely
• Remove the abuser from shared streaming accounts (Netflix, Spotify, Apple Family)
• Shared cloud storage (Google Drive, iCloud, Dropbox): remove sharing permissions and move personal files to a private account
• Bank accounts: if you share an account, contact the bank before making changes — some accounts require both parties' consent to close
• Phone carrier: if you're on a shared plan, you can port your number to a new carrier with just your account PIN

Social media is one of the most common ways abusers maintain contact, track location, and gather information after separation. This module covers a full privacy lockdown across platforms.

• Set all accounts to private immediately (Instagram, Facebook, TikTok, X/Twitter)
• Block on all platforms — not just one. Abusers will check every platform
• Remove location data from past posts: Facebook and Instagram both allow bulk removal
• Review tagged photos: untag yourself from photos that reveal location or routine
• Mutual connections: abusers often use friends or family to monitor your posts. Consider temporarily restricting visibility to a close list
• Don't announce location changes, new jobs, or routines publicly until you feel safe
• New accounts: if you create new accounts, use a different username, email, and profile photo

People-search websites publish home addresses, phone numbers, family members' names, and property records. This module covers manual opt-out from the most dangerous sites.

• What data brokers are and how they get your information (public records, voter rolls, social media scraping)
• Most dangerous for DV situations: Spokeo, Whitepages, BeenVerified, Intelius, Radaris, PeopleFinder
• Manual opt-out: each site has a different process — direct links in facilitator guide
• Opt-outs take 24–72 hours and may not be permanent — recheck every few months
• DRG0NF1Y privacy scan: for approved shelter partners, clients can receive a DRG0NF1Y scan credit to identify and prioritize all broker listings in one report

Safe documentation and clear emergency contacts can be critical in both safety planning and legal proceedings. This module helps clients build a documentation plan that's accessible but hidden.

• What to document: threatening messages, voicemails, emails, incidents (date, time, description)
• Safe storage: a private cloud account the abuser doesn't know about (new Google or ProtonDrive account)
• Screenshots: how to take them on iPhone and Android without making a sound
• Emergency contact card: a physical card with hotline numbers stored somewhere safe (not on a monitored phone)
• Safe word: a word or phrase established with a trusted friend or family member that signals "I need help"

Children and teenagers regularly share information that reveals their home location, daily routine, and school without understanding what it reveals. This module opens parents' eyes to what their kids are putting out there.

• Usernames: "JordanSmith_Grade8" or "Emma_Lakewood" are identity disclosures
• Photo backgrounds: street signs, school logos, bus stop numbers, neighborhood landmarks
• Geolocation in photos: images from iPhone and many Androids embed GPS coordinates in EXIF data
• Friend lists: a public friends list on Facebook or Roblox can reveal family members, school, and location
• Routines: "can't wait for soccer practice at 4pm every Tuesday at Riverdale Park" is a real-world schedule
• Exercise: review a fake student profile together and identify every piece of location/routine information embedded in it

Roblox, Discord, Fortnite, Minecraft, and other gaming platforms are where kids spend significant time — and where adult predators look for targets. This module covers building a safe gaming identity.

• Safe username rules: no real name, no birth year, no location, no school name
• Discord: how servers work, why being in a public server means strangers can message you, how to lock down DMs
• Roblox: friend request settings, how to limit who can chat, how to check recent contacts
• Voice chat: kids should never voice chat with someone they haven't met in person
• Gifts and trades: in-game gifts are a common early manipulation tactic — what to watch for
• What kids should do if someone makes them uncomfortable online: tell a trusted adult first, then block

Most parental control advice focuses on tools that are easily bypassed. This module distinguishes between controls that work and ones that don't — and focuses on free options.

• Apple Screen Time: app limits, content restrictions, communication limits, downtime — hands-on setup
• Google Family Link: app approvals, daily activity reports, screen time, location — hands-on setup
• Router-level filtering: many home routers (Netgear, Asus, Eero) have built-in parental controls — no app needed
• What kids can bypass: VPNs, airplane mode + WiFi, using a friend's device, private browsing
• What actually works: consistent conversation + reasonable limits beats total lockdown every time
• The "trust test": if your child would hide something from you, that's the real risk — not the app

Lecture-based internet safety talks don't work. This module gives facilitators and parents concrete, age-appropriate conversation guides that build trust instead of fear.

• Ages 8–12: "Strangers online" — why someone online can be anyone; the rule of "ask before sharing anything about yourself"
• Ages 8–12: The "would you tell a stranger at the mall?" test for anything they're about to post
• Ages 13–17: Conversations about screenshots being permanent; sexting risks and legal consequences; dating app age minimums
• Ages 13–17: How to talk to a teen who's already in a situation — judgment-free opening scripts
• How to set up a family agreement: what apps are allowed, when, screen-free times, what to do if something feels wrong
• The open-door rule: "You will never be in trouble for telling me something uncomfortable you experienced online."

Online grooming follows recognizable patterns. Parents and school staff who know these patterns can intervene early. This module covers signs, escalation patterns, and who to contact.

• What grooming is: building emotional connection and trust to eventually exploit — doesn't always involve sexual content at first
• Common platforms: Discord, Roblox, Instagram DMs, online gaming voice chat, Snapchat
• Early signs: an adult online friend the child won't talk about; gifts or game currency from a stranger; secretive device use; pulling away from family
• Escalation: isolation from friends/family, exclusive relationship, requests for photos, telling the child "this is our secret"
• What to do: do not confront the person online — preserve evidence (screenshots), contact local law enforcement, and report to NCMEC CyberTipline (free)

Simple, pre-planned safety systems work better than improvising in a crisis. This module helps families build a lightweight emergency communication plan they can actually use.

• Safe word: a word or phrase the child can text or say that means "I need you to come get me, no questions asked"
• Private family group chat: Signal (free, encrypted) for family-only communication
• Check-in schedule: agreed-upon times the child will respond to a check-in message
• Emergency contacts list: who the child can call if they can't reach a parent — minimum 2 trusted adults
• What to do if a stranger contacts the child: don't respond, screenshot, tell a trusted adult immediately
• Practice drill: run through the safe word and check-in procedure with the family before the session ends