Full privacy evaluation | See all
Thumbnail
Updated February 12, 2018

StackUp

  • Intended for children under 13.
  • Collection or use of data is limited to product requirements.
  • Unclear whether this product displays personal information publicly.
  • Unclear whether this product supports interactions between trusted users and/or students.
  • Notice is provided in the event of a data breach.
  • Parental consent is required.
Indicates that the product meets all our required privacy safeguards, but more research should be completed prior to use.
Use Responsibly
Full evaluation
35
Overall Scoreinfo-bubble

This overall score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

Stackup is a service that measures the time students spend reading on the web, and then maps web sites to pre-defined subject area categories. Stackup's terms state they do not provide the opportunity for students to interact directly with one another. Stackup's terms state they do not use learner data for behavioral advertising. The terms also state that users will be given at least a 10 day notice via email of any changes to terms. A visual inspection of the site indicates that data is encrypted on login and account registration, but the terms do not provide significant detail about encryption of data at rest or in transit.

Stackup can be accessed through its website. The Privacy Policy and Terms of Use accessed for this evaluation can be found on Stackup’s website. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
0

The terms of Stackup state they do not provide the opportunity for students to interact directly with one another. Student profiles - which list the student's name and their reading progress - are visible over the web, but students need to share the profile URL for the page to be found. Stackup's terms state they do not support direct communication in the app between students, or between teachers and students.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
42

Stackup's terms state they do not use learner data for behavioral advertising. The terms also state that users will be given at least a 10 day notice via email of any material changes to terms. Because the application uses a browser extension to track reading and browsing patterns, users will need to be given clear instructions to turn off tracking when they do not want their reading habits to be observed. Additionally, the terms state third parties get no access to Stackup data; however, the site uses Google Analytics to track usage patterns. While the use of Google Analytics is fairly common, the terms should accurately reflect the use of third parties, indicate what information they receive, and indicate the terms under which these third parties can use information.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
51

While a visual inspection of the site indicates that data is encrypted on login and account registration, the terms do not provide significant detail about encryption of data at rest or in transit. While the terms specify that access is limited to a "very limited number of persons" who "are required to keep the information confidential" it is not clear whether these requirements are contractual, or how they are enforced. Stackup's terms also specify that the site is scanned regularly for security issues.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
33

Stackup's terms state that schools can use the "School Official" exception to share data with vendors who need that data for a legitimate educational function. Teachers using Stackup should review what the expectations and requirements are for sharing student data with third parties. Teachers should also review whether their district considers a reading log part of an educational record before using Stackup. Stackup's terms state that teachers can request a form to send home to help manage parental consent, but the expectation is that teachers will manage all parental consent required under FERPA and COPPA.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.