Student Online Monitoring: What Schools Can and Cannot See
Parents and staff often hear two opposite stories: that school software sees everything, or that it sees nothing. The truth depends on the device, the account and the tools a district has chosen. This guide lays it out honestly, including the limits.
Usually visible
Websites visited on school devices and school accounts, blocked attempts, and activity inside school email and documents if a monitoring tool is used.
Sometimes visible
Live screens during class, search terms, and sites a personal phone visits while on school Wi-Fi. It depends on tools and settings.
Usually not visible
Personal phones on mobile data, personal apps and messages, and home computers not signed in to a school account.
The four kinds of school software, and what each one sees
"Monitoring" covers very different tools. Many districts use two or three of these together, which is why answers vary so much from one district to the next.
Web filter
Required by CIPA for schools that take E-Rate discounts. It decides which sites can load, based on categories like adult content or gambling.
Safety monitoring tool
Optional. Scans text in school email, documents, chat or searches for signs of self-harm, violence or bullying, and alerts designated staff.
Classroom management
Optional. Lets a teacher see students' screens during class, open a page for everyone, or lock screens to keep focus.
School account and device admin
The district's management console for school accounts and devices. It controls settings, apps and sign-in.
A filter that sees domains, not conversations
Our hosted CIPA filter makes its decision from the domain a device asks for, so it never opens messages or looks at what a student wrote. It exists to meet the filtering duty in CIPA, and it is not a monitoring or classroom screen tool.
- The record is made of lookups and blocks per school, which suits CIPA files.
- Nothing is installed on computers, so there is no agent reading anything.
- Reports show how the policy behaved, not what an individual did.
What is visible, by situation
The same student can be highly visible on one device and invisible on another. This table shows a typical district setup. Your district's tools may differ.
| Situation | Sites visited | Search terms | Message text | Live screen |
|---|---|---|---|---|
| School device, at school | Yes | Usually | School accounts only, if monitored | In class, if used |
| School device, at home | Usually | Usually | School accounts only, if monitored | Depends on schedule settings |
| Personal phone, school Wi-Fi | Site names, often | Sometimes | Generally no | No |
| Personal phone, mobile data | No | No | No | No |
| Home computer, signed in to school account | Sometimes | Sometimes | School accounts only, if monitored | Usually no |
| Home computer, personal account | No | No | No | No |
The school laptop at the kitchen table
Many districts filter school devices wherever they are, so the same rules and logs apply at home. That is how districts keep CIPA filtering consistent on take-home devices.
A personal phone on school Wi-Fi
The network filter sees which sites the phone connects to and blocks restricted categories. Because traffic is encrypted, it generally cannot read messages or page content.
School account on a family computer
Files, email and documents in the school account are visible to the district. Whether browsing is filtered depends on whether the school's browser policy follows the account.
Personal phone on mobile data
School tools are not involved. Parents who want filtering here need their own controls on the phone or the mobile plan.
A site name goes in, a category list comes out
This is the whole of what the filter reads for a decision. It is the website and its categories, nothing about the person.
| Website | Categories in our data | How a filter would treat it |
|---|---|---|
| youtube.com | Streaming Media, Social Networking | Decided by the category switches you set |
| instagram.com | Social Networking | Decided by the Social Networking switch |
| reddit.com | Social Networking, Forums / Message Boards, Community Sites | Three categories apply |
| wikipedia.org | Education/Reference | Reference site, usually allowed |
| discord.com | Email and Messaging, Social Networking, Gaming | Messaging and gaming categories |
| pornhub.com | Adult | Blocked by the CIPA preset |
What school tools usually cannot see
Being clear about limits matters as much as being clear about reach. These gaps are normal, and a school telling you otherwise should explain how.
Personal devices off the network
Once a personal phone or tablet leaves school Wi-Fi, school tools have no view of it.
Encrypted personal messaging
Messages in personal apps are encrypted in transit. A network filter sees at most that the app was used.
Personal accounts
A student's personal email or social account is not linked to school monitoring tools.
Offline files on personal devices
Photos and files stored on a personal device are outside the school's systems.
Context and intent
Software flags words and sites, not meaning. A health search for a class project can look like a concern. Humans must review.
Anything outside retention
Logs are kept for a set period. After that, the data is gone if the district deletes on schedule.
The privacy limits: what the rules actually say
No single law spells out every monitoring rule. Several pieces fit together, and district policy fills the gaps. This is general information, not legal advice.
CIPA
Requires a filter and a policy that includes monitoring the online activities of minors. It also includes a privacy disclaimer: it does not require tracking internet use by any identifiable minor or adult user.
So detailed per-student tracking is a local choice, not a federal mandate. See what CIPA requires.
FERPA
Gives parents the right to inspect and review their child's education records, and limits disclosure without consent. Whether filter logs or alerts are education records depends on how the district keeps and uses them.
State student privacy laws
Many states have laws on how vendors may use student data, contracts, and sometimes monitoring of school devices. They vary widely, so check your state.
Our state school internet safety law guides cover the main ones.
District policy and contracts
The acceptable use policy and the district's vendor contracts set what is collected, who can see it and how long it is kept. These are where most real limits live.
An honest summary: on school devices and school accounts, assume the school can see which sites are visited and may scan school documents and email. On personal devices that are not on the school network and not signed in to school accounts, school tools generally cannot see anything.
Questions to ask your district
Districts should be able to answer these plainly. Many publish the answers in their acceptable use policy or a technology FAQ.
Parents and guardians
- Which tools run on my child's school device: filter only, or also monitoring and classroom management?
- Does filtering or monitoring continue when the device is at home? At what hours?
- Who receives safety alerts, and what happens after an alert, especially at night or on weekends?
- How long are browsing logs and alerts kept, and when are they deleted?
- How can I see what has been collected about my child?
- Do any vendors use the data for anything other than providing the service?
Teachers and staff
- What can I see in class, and is live screen viewing switched off outside my class period?
- What am I expected to do if I see something concerning on a student's screen?
- Who is allowed to look up an individual student's browsing history, and is that logged?
- Is my own staff device filtered or monitored, and under which policy?
- How do I request a site be unblocked for a lesson?
- What should I tell a student or parent who asks what is monitored?
Reports without reading student content
Activity reports, the policy record and a log export are built for the CIPA file you keep. The filter decides by domain and not by page, so there is no message content to store.
Good practice for districts: monitor less, explain more
Trust grows when families know what is collected and why. These habits keep monitoring proportionate and defensible.
Publish a plain list
One page naming each tool, what it sees, when it runs and who can view results. Update it when tools change.
Filter first
Category filtering meets CIPA's filter duty with far less personal data than reading content. Start there before adding scanning tools.
Short retention
Keep logs as long as you need for safety and CIPA evidence, not indefinitely. Summary reports often serve as evidence without full logs.
Limit who looks
Role-based access, with lookups of an individual student's history logged and reviewed.
Time limits
Turn off live screen viewing outside class time, and set clear hours for off-campus alerts.
Human review
Every alert is reviewed by a trained person before action is taken. Software flags; people decide.
Teach the why
CIPA asks schools to educate students about safe online behavior. Explaining monitoring is part of that.
Same rules for staff
Be equally clear with staff about what is visible on their devices. See staff vs student filtering policies.
What typically happens after a safety alert
Parents often worry most about what an alert leads to. Processes differ, but a well-run district follows a path like this one, with people involved at every step.
The tool flags something
A phrase in a school document, a search, or a visit to a site in a concerning category triggers an alert. Most alerts turn out to be harmless, such as a book report on a difficult topic.
A trained person reviews it
A counselor, administrator or designated staff member reads the context. Many districts have the vendor or a small internal team screen out obvious false alarms first.
Most alerts stop here
If the context shows no concern, the alert is closed and no one contacts the family. A good district records the outcome so patterns can be checked later.
Real concerns go to people, not software
If there is a genuine risk, the school's normal safeguarding process applies: a conversation with the student, contact with parents and, in an emergency, outside help.
Common myths about student monitoring
Clearing up these misunderstandings helps both worried parents and staff who are asked hard questions.
| What people hear | What is usually true |
|---|---|
| "The school reads every message my child sends." | School tools only see school accounts and school devices. Personal messaging on a personal phone is generally outside their reach. |
| "CIPA forces schools to watch every student." | CIPA requires a filter and monitoring as part of policy, and states it does not require tracking any identifiable user. How detailed monitoring is remains a local decision. |
| "A blocked site means my child was flagged." | A block is just the filter applying a category rule. It is not an alert, and most blocked attempts are never reviewed by a person. |
| "Turning on private browsing hides activity." | Private browsing only stops the device from saving history locally. Filters on school devices and networks still see site requests. |
| "The school webcam can watch my child." | Filters and typical monitoring tools do not use cameras. If any tool ever used one, the district should disclose it explicitly. |
| "Logs are kept forever." | Retention is set by district policy and contracts. Ask for the actual period, and whether it is enforced. |
A note for students and families on trust
Monitoring works best when it is part of a conversation, not a secret. A few points help families talk about it.
It is about safety
School tools exist mainly to keep harmful content away from children and to spot students who may need help.
School devices are school property
Students should treat a school device and school account as places where the school can see activity.
Talk about mistakes
If a filter blocks a homework site, the right step is to ask a teacher to review it. Districts have a process for that.
Home rules are yours
School tools cover school devices and accounts. Rules for personal phones and home networks are a family decision.
Ask before assuming
If something about monitoring worries you, ask the school directly. Most concerns are resolved by a clear answer.
Privacy still matters
Families can reasonably ask the district to collect only what it needs and to delete it on schedule.
Filter, monitor or classroom tool: which job does the filter do?
This table keeps the roles apart so the right tool is bought for the right question.
| Question | Monitoring or classroom software | Hosted CIPA filter |
|---|---|---|
| Is the CIPA filtering duty met? | Not its purpose | Yes, blocking by category with a CIPA preset |
| What does it read? | Often on-screen or message content | Only the requested domain |
| Needs software on devices | Usually yes | No, nothing installed on computers |
| Record you can file | Alert histories | Activity reports, policy record, log export |
| Works for off-network laptops | Depends on the agent | Private encrypted link keeps the same rules |
| Changing the rules | Per product settings | Applies in seconds |
Student monitoring FAQ
Can the school see my child's browsing history at home?
If your child uses a school-issued device or is signed in to a school account, the school's filter and any monitoring tool usually keep working at home, so the school can often see sites visited on that device or account. Activity on a personal device that is not signed in to a school account is normally outside the school's tools.
Can schools read students' private messages?
It depends on the tools. A web filter typically records which sites were visited, not message content. Some monitoring tools scan text in school email, documents and chat within the school's own accounts for safety concerns. Messages in personal apps on a personal phone are generally not visible to school tools.
Does CIPA require schools to track each student?
No. CIPA requires a filter and a policy that includes monitoring the online activities of minors, but the law also states it does not require tracking internet use by any identifiable minor or adult user. Detailed individual tracking is a local choice, not a federal requirement.
Can I see what the school has collected about my child?
Under FERPA, parents generally have the right to inspect and review their child's education records. Whether particular filter logs or alerts count as education records depends on how they are kept and used, so ask the district how it treats them and how to make a request.
Can a school see my child's screen live?
Classroom management software lets a teacher see screens of school devices during class. Districts usually limit this to school hours and to the teacher's own class. Ask your district whether live screen viewing is used and when it is switched off.
Does using the school Wi-Fi on a personal phone let the school see everything?
On school Wi-Fi the network filter usually sees which sites a phone connects to, and blocks categories the policy restricts. Because most traffic is encrypted, it generally cannot read the content of messages or pages unless special inspection is set up on that device.
How long do schools keep monitoring data?
There is no single federal rule for filter logs. Retention is set by district policy, state records laws and the vendor contract. Ask your district for its retention period and whether logs are deleted at the end of each year.
Pricing depends on the number of schools and devices, and we send a quote within one business day. A one-site pilot lets your team see exactly how little the filter records before you decide.
Filtering that meets CIPA without over-collecting
Our category filtering blocks harmful content by category, so districts can meet their filter duty while keeping personal data collection proportionate.
Talk to us about your district