Basic privacy evaluation | See all
Updated November 27, 2018


  • Privacy polices do indicate a version or effective date.
  • Data are sold or rented to third parties.
  • Data are shared for advertising or marketing.
  • Unclear whether this product displays behavioral or contextual advertising.
  • Unclear whether this product allows data collection by third-party advertising or tracking services.
  • Unclear whether this product uses data to track and target advertisements on other third-party websites or services.
  • Unclear whether this product allows third parties to use data to create ad profiles, data enhancement, and/or targeted advertisements.
The criteria for "Use with Caution" are narrowly focused around data uses related to creating profiles that aren't related to any educational purpose, and using data to target ads. We include both first party (ie, the vendor that builds the service) and third party (any company given access by the vendor) data use. It's worth highlighting that using data to profile students violates multiple state laws, and in some cases also violates federal law.

A service can be designated "Use with Caution" for either a lack of transparency around data use -- which creates the potential for profiling and behavioral targeting -- or for clearly stating that they use data to target advertisements and/or create profiles. As with any application being considered for use within schools, school and/or district staff should review the privacy policies and terms of service to ensure that they meet the legal and practical requirements of their state laws and school policies.

As with the "Not Recommended" criteria, a "Use with Caution" designation is NOT a sign that a vendor is necessarily doing anything unethical or illegal. It is a sign that, based on publicly available policies,  we do not have adequate guarantees that data will not be used by first or third parties to create non-educational profiles or to target behavioral ads.
Use with Caution
Basic evaluation
A basic privacy evaluation answers key questions about a product's policies covering issues of safety, privacy, security, and compliance.

CodeMonkey is a fun and educational game environment where students learn to code in a real programming language, no previous experience needed. However, there is a lot that this privacy policy does not explicitly address. While there are certain elements of the privacy policy and product that are positive - an age gate is present if you try to sign-up as a student (but none if you press parent registration) - there are other issues that the user should be aware of. For example, an advertising tracker remains in place even for a child who is logged in under 13 (Google Adwords Conversion), and the Facebook Connect tracker remains active for that user as well (in this case a child account set-up by their parent). In addition, the product permits social login (Google, Facebook, Office 365, Edmodo, Clever) without addressing the practices of these third-party social login providers in the privacy policy. The terms state that while the company may not share information directly with third parties, the policy itself is vague and gives the company a lot of leeway, e.g. "We may use and share Information with certain third-parties that help us operate our Website and Service (e.g. cloud provider, email distribution service providers and other similar service providers)." Lastly, while it seems as if advertising, tracking, and behavioral advertising in particular is not part of the product experience, these are not directly addressed in the privacy policy.

CodeMonkey can be accessed through its website. The Privacy Policy and Terms of Use used for this evaluation can be found on CodeMonkey’s website. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.