Full privacy evaluation | See all
Thumbnail
Updated May 3, 2019

StackUp

  • Intended for children under 13.
  • Collection or use of data is limited to product requirements.
  • Personal information is not displayed publicly.
  • Users cannot interact with trusted users and/or students.
  • Notice is provided in the event of a data breach.
  • Parental consent is required.
Indicates that the product meets all our required privacy safeguards, but more research should be completed prior to use.
Use Responsibly
Full evaluation
55
Overall Scoreinfo-bubble

This overall score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

Stackup is a service that measures reading time, reading level, and category of online reading & learning on the web, and then maps web sites to pre-defined subject area categories. The terms state students cannot interact with each other within the Stackup platform. Stackup's terms state they do not use sell student data or use student data for behavioral advertising. The terms state Stackup maintains a comprehensive security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of student personal information against risks. Lastly, the terms state that Stackup does not knowingly collect any Personally Identifiable Information from children under 13 without parental consent.

Stackup can be accessed through its website. The Privacy Policy accessed for this evaluation can be found on Stackup’s website. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
37

The terms state students cannot interact with each other within the Stackup platform. In addition, educator interactions with their students are limited (for example, a Teacher can view a students dashboard, but cannot change it) and only the student, student’s teachers, and designated school leaders can see a student’s dashboard. Student accounts are not viewable by the general public, and a user must be securely signed in and associated with that particular school, class, or student to be viewed.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
66

Stackup's terms state they do not use sell student data or use student data for behavioral advertising. In addition, the terms state Stackup will not build a personal profile of a student other than for supporting authorized educational or school purposes or as authorized by the parent, student, or teacher. The terms also state that users will be given at least a 10 day notice via email of any material changes to terms. Because the application uses a browser extension to track reading and browsing patterns, users will need to be given clear instructions to turn off tracking when they do not want their reading habits to be observed. Additionally, the terms state third parties have no access to Stackup data, however, the service supports signing-up using “Sign in with Google” which utilizes Google OAuth 2.0.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
64

The terms state Stackup maintains a comprehensive security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of student personal information against risks – such as unauthorized access or use, or unintended or inappropriate disclosure – through the use of administrative, technological, and physical safeguards appropriate to the sensitivity of the information. In addition, the terms state personal information is contained behind secured networks and is only accessible by users and a very limited number of Stackup personnel who have special access rights in order to update and maintain the service. Additionally, the terms state personal information is encrypted while in transit and in the event of a data beach Stackup will provide notice to affected users.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
54

The terms state that Stackup does not knowingly collect any Personally Identifiable Information from children under 13 without parental consent. Stackup's terms also state that teachers can request a form to send home to help manage parental consent, but the expectation is that teachers will manage all parental consent required under FERPA and COPPA. Stackup's terms state that schools can use the "School Official" exception to share data with vendors who need that data for a legitimate educational purpose. In addition, teachers using Stackup should review what the expectations and requirements are for sharing student data with third parties. Teachers should also review whether their school or district considers a reading log part of an educational record before using Stackup.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.