pkrp-about
This activity is designed to introduce online ‘cookies’ and private browsing in a way learners can see, touch, and even taste, with no devices needed. As the first part of the Carried Away with 'Cookies' series, it builds the shared language learners need to explore how websites remember us and the digital footprint we leave behind.
Learners will take turns ‘landing’ on printed paper website stations around the room, then flip a hidden card to find out how they’ll visit. A Cookie card means splitting a real cookie and spilling crumbs on the site before eating, while an Incognito card means taking a bite and sweeping up, leaving no trace on that site! Together, learners then look back over the crumb trail to talk about where cookies were used, what private browsing changes, and how websites use our data. Get ready for a crumb-tastic investigation!
pkrp-supp-materials
[PDF] | Cookie & Incognito Cards
Cookie Cards (PDF)
https://drive.google.com/file/d/1alTrUgU5SCgDc98fwpd3JAIVtT7utr5K/preview
Incognito Cards (PDF)
https://drive.google.com/file/d/125v6MqgIfzC1PqwiSMzL74knrq1HpNGC/preview
pkrp-dt-detail
dddo-po1
Modelling how websites ask a browser to save small files called cookies
Recognising that stored information stays put and can be read back later
Connecting an action to a result, as a simple input and output
dddo-po2
Exploring how websites use the information cookies collect, and what that means for the people browsing
Comparing regular and private browsing, and the different digital trail each one leaves behind
Investigating different types of cookie data using the Cookie card examples, and why a website might want each one
pkrp-cc-detail
health-pe
Digital literacy and safety management, building understanding of the trail our online activity leaves behind so learners can make safer, better-informed choices online.
pkrp-diff
Swap cookies for a crumbly alternative such as rice crackers or Weet-Bix, or a non-food stand-in like torn paper, so learners with allergies or food restrictions take full part in the same experience.
Work in pairs or small groups to take turns reading cards aloud, spilling crumbs, and sweeping, to help keep everyone engaged, share the load, and build confidence together.
Before cookie data types are introduced, consider a simplified reflection anchored in two questions: “Where did cookies leave crumbs?” and “Where was there no trace?”, so the core idea lands ahead of added complexity.
pkrp-ext
Design a cookie consent pop-up for one of the website templates, deciding which cookies the site truly needs and which visitors should be able to say no to.
Create a report that explains cookies and private browsing, in order to share what they have learned, link with practical actions, and start real conversations about online habits.
Step into a real browser with Carried Away With Cookies, Part 2: Bird Sighting Binoculars, to test the crumb-trail ideas on a real website, where a cookie limits how many native birds you can spot each day.
pkrp-notes
Teachers should consider:
Food allergies & dietary needs, including checking for allergies and any cultural or dietary requirements, and consulting your school’s food guidelines to confirm biscuits or swap in safe, crumbly alternatives like rice crackers or Weet-Bix where needed.
Food hygiene throughout the activity, including handwashing, protecting printed templates, and managing crumbs as they’re swept off.
Space & station setup, including enough clear floor space for learners to move between sites and crouch down safely, and positioning sites so the group can see each card reveal.
Materials Preparation, including printing and cutting the Cookie and Incognito cards, printing the website templates, placing one of each card facedown at every site, and having two cookies per site plus spares.
Group assignments, including supporting student collaboration, how partners or group members alternate roles, and how turns between pairs or groups rotate until everyone has had a go.
Clarifying the metaphor, particularly during the reflection, including explaining that real cookies are saved on our own device, not left on the website, and that ‘sweeping up’ in private browsing clears our own device but doesn’t stop the website knowing that someone visited. See Digital Safety & Wellbeing guidance below for more.
pkrp-dsw
This activity is device-free, but the subject it explores is digital privacy, so it's a great opportunity to build accurate understanding of how websites use data, to make sure private browsing isn’t mistaken for invisibility, and to ground safe, confident habits that apply on real devices online.
>>> General Guidance
Frame cookies as a tool, not a threat. Keep the tone curious rather than worrying. Many cookies are helpful, such as keeping you logged in or remembering what’s in a shopping cart. The aim is awareness and informed choices, not fear.
Treat private browsing as a tidy-up, not an invisibility cloak. It clears cookies and history from that device when the window closes. Websites, the school network, and internet providers can still see the visit, and signing in to an account still identifies you.
Talk about kinds of sites, not personal experiences. Keep discussion on patterns, such as “a shopping site might remember…”, rather than inviting learners to name the sites they visit.
Treat wanting privacy as normal and healthy. Just like we value privacy elsewhere in our lives, learners who value private browsing are valid in doing so. They’re not automatically doing something suspicious, and the conversation should never make them feel that way.
Model the habits you’re teaching. Read cookie banners rather than clicking “Accept all”, and sign out of shared school devices. Link learning to your school’s online safety and digital citizenship guidelines, so learners see how it connects to everyday expectations.
>>> Before the activity
Establish a safe space for discussion. Set the expectation that the conversation will be about browsing in general terms (“someone might…”) rather than expecting or encouraging learners to share their real, specific experiences online.
Expect different starting points by age. Y4-6 learners often use shared whānau devices and may have few accounts of their own. Y7-8 learners are more likely to have accounts, sometimes on apps or games with a minimum age above their own.
Plan how you’ll respond to disclosures. Some learners may mention using private browsing to hide activity at home or experiences with content that upset them. Decide in advance on a calm, neutral response.
>>> During the activity
Catch the “invisible” idea when it appears. When an Incognito card comes up, point out that the learner still ate the cookie: the site knew they visited, even though no crumbs were left behind.
Acknowledge disclosures, then move on. Respond briefly and without judgement, avoid probing in front of the group, and follow up privately afterwards. See the If a Learner Discloses Something guidance for more on this.
Keep examples fictional. If learners offer real usernames, passwords, or details about friends, redirect to the activity’s template sites.
Watch for worry. If a learner seems anxious about being tracked, bring the focus back to the choices they can make.
>>> If a Learner Discloses Something
Talking openly about digital risk can prompt learners to mention something that they’ve heard about or that’s even actually happened to them.
In the Moment:
Acknowledge and validate kindly and calmly. You don’t need to resolve anything on the spot. Your job in the moment is to make the learner feel heard. “Thanks for sharing. That sounds like it was confusing/frustrating/a bit scary” goes a long way, without needing to draw out further detail in front of the class.
Keep the focus general rather than personal. “That’s a great example of the kind of thing our framework is designed to catch” helps bring things back to the objective rather than examining a personal situation in front of the class.
Handling vs Redirecting:
Many disclosures are OK to handle within the lesson by contextualising how the framework itself is designed to address them. These kinds of more commonplace issues, like a confusing website address, an odd pop-up, or other moments of uncertainty, are worth acknowledging and then checking in on privately afterward.
Some disclosures are worth treating as a cue to redirect to more appropriate counsel rather than risk mishandling a more serious issue. Trust your instincts and your understanding of your school’s processes to identify signs of real distress, risks to safety, and what to do next.
When in doubt, redirect. You don’t have to make the call alone or immediately. A private follow-up conversation is always available as a next step, and your school will have processes and people to support you and your learners in this.
Next Steps:
Follow up privately with the learner, even briefly, so they know it wasn’t just brushed past.
Reach out for help, if a disclosure or follow-up conversation meets any signals for concern, by looping in whoever your school’s process points to that can provide the appropriate care and assistance.
>>> After the activity
Reflect on what it means for a website to remember things about us, reinforcing that making informed decisions is what we can control to keep ourselves safe, not content itself.
Reinforce a clear boundary between learning environments and unmediated digital spaces, including that this activity and discussion are only an introduction to the complexity of cookies online.
Encourage learning together. Rather than change settings alone, encourage learners to look at cookie and privacy settings with a whānau member if they’re curious beyond the lesson.
Point to support beyond the classroom. If a disclosure suggests a learner may be at risk, or has been exposed to harmful content, follow your school’s process to safeguard and support them. Netsafe (netsafe.org.nz) offers free online safety advice for learners, whānau, and kaiako.
pkrp-lp
>>> y4-6 | Y4-6 | 1 Lesson
Introduction & Prediction — Read the "What are cookies?" and "What is private browsing?" explanations aloud together, using the fortune cookie and 'incognito' notes to spark curiosity. Explain that incognito mode keeps cookies only until the browser close.
Setting Up — Set up the sites by laying the printed website templates on the floor, placing a face-down Cookie card and Incognito card on each, and setting two edible cookies on each site (or allergy-safe alternative where needed) without causing any crumbs yet.
Site Visits — Guide learners to take turns ‘landing’ on a site and revealing a card at that site. Then follow the card’s instructions. Narrate each turn aloud, for example: “This site now has a crumb trail”. Repeat until everyone has had a turn visiting a site.
Cookie card: Ask the learner to split a real cookie, making sure to spill some crumbs onto the site page before eating a portion.
Incognito card: Ask the learner to split a cookie, take a bite, and sweep up so no crumbs remain.
Trail Spotting — Walk the group around every site and compare the crumby sites with the swept ones. Ask: “Can we tell where cookies were used? How about private browsing?”
Reflection — Explore how sweeping up clears the crumbs from your own device but that websites and networks still see your activity. Point out that even with an Incognito card, learners still ate the cookie, so the site knew they visited. Explore the Cookie card data types together and ask which ones learners would be OK for a website to remember, which ones not as much, and why.
>>> y7-8 | Y7-8 | 1 Lesson
Introduction & Terminology — Break into small groups, have each read the "What are cookies?" and "What is private browsing?" sections of the activity guide, then share as a class their understanding of cookies and private browsing in their own words.
Setting Up — Have the groups follow the “Getting Started” steps to set up the website templates, cards, and edible cookies or allergy-safe alternatives.
Site Visits — Run the visiting rounds in groups, with each group keeping a simple tally of the sites visited and which card was revealed.
Cookie card: Split a real cookie, making sure to spill some crumbs onto the site page before eating a portion.
Incognito card: Split a cookie, take a bite, and sweep up so no crumbs remain.
Reading the Footprint — Have groups survey the crumb trails across all the sites and decide what each site could “know” from them. Match the trails to data types on the Cookie cards.
Testing Private Browsing — Challenge groups to explain what sweeping up actually removed, and what it didn’t remove, given they still ate the cookie. Draw out that private browsing tidies the device, but that sites and networks still see activity.
Reflection — Use the guide’s reflection questions to discuss how the activity shows websites using our data. Ask each learner to name one cookie data type they’d now think twice about sharing and why.