There's an old Gmail address I have that someone is using for the child's classroom/school stuff. I clicked the link to see if it was real - it's totally real, I can see the kid's first and last name, who their teachers are, PHOTOS, etc.
If you have a kid whose classroom uses classdojo.com please be aware that if you give them the wrong email address, the person with that address can EASILY log in and see everything associated with your child. No security/privacy questions. Nothing.
(Tags?)
@madewokherd Yep, the link went to a coded URL on their site and it asked me to make a password. I did, and that was it. I didn't have to answer any questions or confirm anything like mine or the kid's date of birth, it just put me right into the child's account with all their private info. I'm going to write a letter to the company tomorrow and suggest that this is a really, really bad way to do things.