Basic privacy evaluation | See all
Updated February 7, 2019


  • Privacy polices do indicate a version or effective date.
  • Unclear whether data are sold or rented to third parties.
  • Data are shared for advertising or marketing.
  • Behavioral or contextual advertising is displayed.
  • Data are collected by third-party advertising or tracking services.
  • Unclear whether this product uses data to track and target advertisements on other third-party websites or services.
  • Unclear whether this product allows third parties to use data to create ad profiles, data enhancement, and/or targeted advertisements.
The criteria for "Use with Caution" are narrowly focused around data uses related to creating profiles that aren't related to any educational purpose, and using data to target ads. We include both first party (ie, the vendor that builds the service) and third party (any company given access by the vendor) data use. It's worth highlighting that using data to profile students violates multiple state laws, and in some cases also violates federal law.

A service can be designated "Use with Caution" for either a lack of transparency around data use -- which creates the potential for profiling and behavioral targeting -- or for clearly stating that they use data to target advertisements and/or create profiles. As with any application being considered for use within schools, school and/or district staff should review the privacy policies and terms of service to ensure that they meet the legal and practical requirements of their state laws and school policies.

As with the "Not Recommended" criteria, a "Use with Caution" designation is NOT a sign that a vendor is necessarily doing anything unethical or illegal. It is a sign that, based on publicly available policies,  we do not have adequate guarantees that data will not be used by first or third parties to create non-educational profiles or to target behavioral ads.
Use with Caution
Basic evaluation
A basic privacy evaluation answers key questions about a product's policies covering issues of safety, privacy, security, and compliance.

Fortnite by EPIC Games is a multiplayer game where users and their friends collaborate to build massive forts and battle against hordes of monsters, all while crafting and looting in giant worlds. The terms of Fortnite disclose social interactions are available between users through the use of social media features to promote and facilitate interaction among players. These features allow users to publicly share information with other users such as their display name, social network user ID, profile picture, and the user IDs and profile pictures of their connections. Fortnite's terms disclose personal information may be used for behavioral advertising and tracking purposes. However, the terms do not state whether personal information can be sold to third parties. In addition, Fortnite's terms state they take reasonable steps to protect the confidentiality and security of personal information collected from users of the service.

Lastly, the terms of Fortnite state the service is not targeted towards children under 13 years of age and the service does not intentionally collect personal information from children. However, parents and teachers should be aware Fortnite would likely appeal to children under 13 years of age. A service may still be considered directed to children given its subject matter, visual content, use of animated characters or child-oriented activities and incentives, music or other audio content, age of models, presence of child celebrities or celebrities who appeal to children, language or other characteristics of the service, as well as whether advertising promoting the service is directed to children.

Fortnite can be accessed through its website, and is available for download at the iOS App Store, and on an Android APK Download Page as a separate download (via sideloading) that bypasses the Google Play Store. The Privacy Policy and Terms of Use used for this evaluation can be found on Fortnite's website, iOS App Store, and the Android APK Download Page. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.