Visual Studio Code for Education

Does the policy mention parents specifically?

“When a child is under 13-or a higher age if required in their region-the child will need consent from their parent or guardian to create a Microsoft account. Parents can change or revoke consent at any time.”

Can parents view their child's data?

“For Microsoft products and services that require parental consent, parents can view and delete certain data about their child, such as browsing history, search history, location activity, and app usage by signing into the parent’s [privacy dashboard](https://account.microsoft.com/privacy).”

Can parents modify their child's data?

“As the organizer of a Microsoft family group, the parent or guardian can manage their child’s information and settings on their [Family Safety](https://account.microsoft.com/family) page and view and delete a child’s data on their [privacy dashboard](https://account.microsoft.com/privacy).”

Can parents delete their child's account?

“To delete all your child’s personal information, request deletion of the child’s account using the [close your account form](https://go.microsoft.com/fwlink/?LinkId=523898).”

Is there a dedicated Children's Privacy section?

“Microsoft offers many products and services that children and teens can use, though child and teen users will not always have access to all the features and services that adult users do.”

Does it reference COPPA compliance?

The policy does not mention COPPA.

Does it reference FERPA compliance?

The policy does not mention FERPA.

Is parental consent required for child accounts?

“When a child is under 13-or a higher age if required in their region-the child will need consent from their parent or guardian to create a Microsoft account.”

Can users access their personal data?

“You can request **access to**, **erasure of**, and **updates** to your personal data.”

Can users download/export their data?

“If you’d like to **port** your data elsewhere, you can use tools Microsoft provides to do so, or if none are available, you can contact Microsoft for assistance.”

Is there a self-service data access tool?

“**Microsoft privacy dashboard**. You can control some of the data Microsoft processes via your Microsoft account on the [Microsoft privacy dashboard](https://account.microsoft.com/privacy). For example, you can view and clear the browsing, search, and location data associated with your Microsoft account.”

Is a specific data format mentioned for export?

The policy describes export tools but does not name any file format.

Is there an API for data access?

The policy does not describe an API that users can use to access their data.

Is data collection itemized?

“**Name and contact details**. Your first and last name, email address, mailing address, phone number, and other similar contact details.”

Can the app be used without a real name?

The policy says it collects names, including children's names, and that some products require a real name.

Can the app be used without an email?

The policy says it collects email addresses, including children's email addresses.

Does it state collection is limited to what is necessary?

“We will not knowingly ask children under the age of consent to provide more data than is necessary to provide the product.”

Is IP address anonymized or truncated?

The policy says it collects IP addresses but does not say they are anonymized or truncated.

Is location tracking explicitly excluded?

The policy says it collects precise and imprecise location data.

Does it explicitly state no selling of data?

“For Microsoft products provided by your K-12 school, including Microsoft 365 Education, Microsoft will: - not collect or use student personal data beyond that needed for authorized educational or school purposes; - not sell or rent student personal data;”

Are third-party providers named?

“We may provide collected data to internal and external partners, including Xandr, other subsidiaries and affiliates, Yahoo, Facebook, or Trade Desk to help make sure the ads you see in our products and theirs, or on other sites, are more relevant to you.”

Are providers contractually restricted?

“We also provide personal data to vendors or agents working on our behalf for the purposes described in this statement, such as companies we hire to provide customer service support. These companies must comply with our data privacy and security standards and may not use your data for other purposes.”

No-targeted-advertising commitment?

“For Microsoft products provided by your K-12 school, including Microsoft 365 Education, Microsoft will: - not collect or use student personal data beyond that needed for authorized educational or school purposes; - not sell or rent student personal data; - not use or share student personal data for advertising or similar commercial purposes, such as providing personalized advertising to students;”

Is AI/ML data sharing addressed?

“As part of our efforts to improve and develop our products, we may use your data to develop, train, and fine-tune our AI models, including large language models (LLMs).”

Child-specific sharing restriction?

“For Microsoft products provided by your K-12 school, including Microsoft 365 Education, Microsoft will: - not collect or use student personal data beyond that needed for authorized educational or school purposes; - not sell or rent student personal data; - not use or share student personal data for advertising or similar commercial purposes, such as providing personalized advertising to students;”

Cookies/tracking limited or opt-out?

“Where consent is required, you may withdraw consent to optional cookies by clicking “Manage cookies” in the footer of the website.”

Can users delete their account?

“**Microsoft account.** You can visit the [Microsoft account website](https://account.microsoft.com/) if you want to access, edit, or remove your account’s profile and payment information, change your password, add security information or close your account.”

Self-service deletion mechanism?

“**Microsoft account.** You can visit the [Microsoft account website](https://account.microsoft.com/) if you want to access, edit, or remove your account’s profile and payment information, change your password, add security information or close your account.”

Specific data retention timeline?

“After requesting account closure, the account is marked for deletion, but we will wait 60 days before permanently deleting the account in case you change your mind or need to access information. After 60 days, the account will be permanently deleted.”

Auto-deletion of inactive accounts?

The policy does not say inactive accounts are deleted automatically.

Post-deletion handling described?

“After requesting account closure, the account is marked for deletion, but we will wait 60 days before permanently deleting the account in case you change your mind or need to access information. After 60 days, the account will be permanently deleted.”

Advertising model explicitly disclosed?

“Advertising helps us provide, support, and improve some of our products. Ads may be shown based on your current interactions with us, as well as personalized using information about you over time.”

Free from third-party advertisements?

The policy says Microsoft allows third-party ad companies to show ads on its sites and does not say the product has no ads.

Children excluded from ad targeting?

“We do not deliver personalized advertising to children whose birthdate in their Microsoft account identifies them as under 18 years of age.”

Ad-free option available?

The policy says users still see ads after opting out of personalized ads, and it offers no ad-free option.