Every student account is a password to reset, a data record to protect, and a small legal question about consent. For primary classrooms, the safest and simplest tools are increasingly the ones that ask children to log in to nothing at all. Here is why link-based, no-login tools are winning — and what to look for.
The hidden cost of student logins
Asking young children to hold usernames and passwords creates three problems at once:
- Friction. Six-year-olds forget passwords. Lessons stall while you reset them, and the tool that was meant to save time starts costing it.
- Privacy risk. Every account is personal data a company now stores about a child. The more accounts, the bigger the surface for a breach.
- Consent and compliance. Collecting data from children triggers rules like COPPA in the US and FERPA around school records, plus GDPR-style laws elsewhere. Accounts pull you straight into that territory.
What "no-login" actually means
The best no-login tools give each child a single, unguessable private link — a long web address that opens straight to their own quiz and nothing else. There is no username, no password, and no shared class code that lets one child open another's work. Technically this is called a capability link: holding the link is what grants access, so the link itself has to be long and random enough that it cannot be guessed.
Why it is saferNo password means nothing for a child to forget, reuse, or share — and far less personal data for anyone to store or lose.
Data minimisation: collect less, worry less
The single best privacy decision a classroom tool can make is to collect almost nothing. A first name and an answer log is enough to run a daily quiz. No surnames, no emails, no birthdays, no photos. When a tool stores only a first name, a breach exposes almost nothing, consent is far simpler, and you can honestly tell a parent exactly what is held about their child.
What to look for in a no-login tool
- Private, per-child links — not a shared class code that any child can type into another's session.
- Minimal student data — ideally first name only, entered and controlled by the teacher.
- A clear privacy policy that names what is stored, who processes it, and how to delete it.
- Teacher control — you can view, edit, and delete any child's record yourself, at any time.
- No advertising or data selling. Children's attention should never be the product.
The trade-offs to know
No-login is not magic. Because the link is the key, it should be shared through a channel the family controls — sent home to a parent rather than posted somewhere public. And a child who loses their link needs the teacher to re-share it, not a self-service password reset. In practice these are small costs against the friction and risk that accounts create, especially for the youngest learners.
How Brainling handles it
Brainling was designed no-login from the start. Teachers have real accounts; students never do. A teacher adds a child by typing a first name, and the app generates that child's own private link automatically — the link resolves to exactly one student and nothing else. For students, Brainling stores a first name and their quiz answers, and nothing else. You can read the full privacy policy for the details, and our guide to sharing links home on WhatsApp covers getting those links to families safely.