Politique de protection des élèves

01 Why this policy exists

Papoty publishes short videos in which students and recent graduates tell students in their last two years of secondary school what university is actually like. Most viewers are 16 to 18, and many are minors.

Papoty is run by one adult: me, Antoine Wenmacker, final year Business Engineering student at Maastricht University. There is no organisation, no staff and no budget, so the rules have to be simple enough for one person to keep every day and specific enough for anyone to check.

It is public so that a school can see exactly what I do before forwarding anything to students, and hold me to it. I am not a trained safeguarding professional. If your safeguarding lead sees a gap, please tell me.

02 Scope

This policy covers everything Papoty publishes or runs:

• the short video clips, one main clip and four or five short cuts per speaker;
• Papoty's accounts on TikTok, Instagram, YouTube and LinkedIn;
• papoty.eu, in English and French, including the optional account for email alerts from 18 January 2027 (16 and over);
• live online sessions, on hold today, which follow section 07 when they restart.

It applies to me, to every alumni speaker, and to any volunteer or collaborator who joins later. Papoty has no student ambassadors and collaborates only with adults and organisations, never with creators under 18.

The accounts stay empty until Monday 18 January 2027, when a short countdown starts before the first videos on 4 February. The settings in section 06 are switched on before that first post.

03 The designated safeguarding lead

Antoine Wenmacker, hello@papoty.eu

Papoty has no staff, so there is no second person yet. When a second adult joins Papoty in any role, a deputy safeguarding lead is named here, and both can see and act on a concern.

If a concern is about me, you do not need to go through me. Take it to your school's own safeguarding lead, to Child Focus (116 000) or to the police, and I will cooperate fully.

04 The ten rules

These apply to everyone in section 02. Each comes with its reason.

1. No private messages with students, in either direction, on any platform. A private channel between an adult and a minor is where most online harm starts, and a rule this plain is easy to keep and easy to check.
2. Papoty asks no student for a name, email, school or year to watch anything, through social media or through papoty.eu. The one exception is the optional account in section 09, for people of 16 and over, which holds the minimum and is never shown to anyone. Data that is never collected cannot leak or be misused, and Papoty has no organisation behind it to hold such data at scale. So watching needs none, and the one thing a student can choose to ask for, email alerts, holds as little as possible and is deleted in one click.
3. Comments are answered in public in one sentence or not at all, and no caption ever puts a question to students. A short public answer helps everyone who reads it, while a question aimed at minors invites a thread of personal replies that an adult then has to manage.
4. Nothing is published that names or shows a student. Students have not agreed to appear, and Belgian law requires a person's consent before their image is used (Code of Economic Law, article XI.174), which for a minor involves their parents too.
5. Speakers never give personal contact details on screen and never arrange contact with a student. A speaker's part ends with the clip or the session, so there is never a private route from a video to a student.
6. Everything is suitable for 16 to 18 year olds: no glamorising of alcohol or drugs, no sexual content, no hate, and no criticism of a named teacher or member of staff. Every clip should be one a school could show in class without a second thought.
7. Nothing is sold to students and nothing is advertised to them, and any collaboration that brings Papoty or a speaker a benefit is labelled as advertising under Belgian rules. Orientation advice is only worth hearing if nobody paid for it, and when someone has, students are entitled to know.
8. Nobody is recorded in a live session: questions come through the chat and are read out by the moderator, and Papoty's live sessions are never recorded. A student's face, voice or name in a recording can follow them for years, and nobody can give real consent to that in the middle of a live room.
9. Every clip is approved by its speaker before publication and removed from papoty.eu and every Papoty account within thirty days of a request. Speakers are volunteers telling personal stories, and consent that cannot be withdrawn is not real consent.
10. Any concern about safety or content is acted on the same day it reaches me. Harm online moves in hours, and a one person project cannot hide behind a queue.

Labelling under rule 7 follows the FPS Economy guidance of October 2025: the word "advertising" (or "publicité") at the start or on the image, the brand named, and the platform's paid partnership tag. The CSA, the French speaking community's media regulator, also expects a spoken mention; #ad alone is not enough.

05 Speaker code of conduct

Speakers agree to this code when they sign the participation note (English and French PDF).

As a Papoty speaker, you:

1. Talk honestly about your own path, including what did not go well, and speak only for yourself.
2. Do not promote a paid service, a product or your employer.
3. Tell Papoty before recording if a university, company or agency pays or rewards you as an ambassador, so viewers can be told.
4. Keep your phone number, email, handles and links off screen.
5. Never contact a student privately or arrange to meet one, online or in person.
6. Send any student follow up through Papoty: do not start a conversation, point the student to the comments under the clip and let Papoty know.
7. Keep your language and content suitable for 16 to 18 year olds.
8. Speak about other universities, schools and institutions with respect. Criticise experiences, not named people.
9. Show nobody else's personal data: no classmates' faces or names, no screens or documents with other people's details.
10. Tell Papoty the same day if anything about a student worries you.

A clip that breaks the code is not published, or comes down the same day (section 08).

06 Moderation of comments and messages

From the first post in February 2027, I read every new comment and message on every Papoty account at least once a day.

What arrives	What happens
A comment naming a student, or naming a teacher, member of staff or school negatively	Deleted, no reply.
Contact details of anyone, or an invitation to talk privately ("dm me", phone numbers, other handles)	Deleted.
Harassment, bullying, hate, spam, scams, sexual or adult content	Deleted, the account blocked and, where rules are broken, reported to the platform.
Threats, anything sexual involving a minor, impersonation of Papoty or a speaker	Reported to the platform, then section 08. Sexual content involving a minor goes to Child Focus and is never saved or forwarded.
A factual question, or a request for advice	One general sentence in public, or no reply.
Anything suggesting someone is at risk	Section 08, the same day.

Never done: private messages with students; arguing with anyone, about anything; following, liking or tagging students' accounts; any reply that asks a student to say more.

Settings, in place before the first post and checked every September

• Instagram: message requests from accounts Papoty does not follow switched off, and hidden words on. Papoty follows no students, so no student can start a conversation.
• TikTok: comment filters on (spam, offensive comments, keywords), and direct messages set to the most restrictive option the account allows.
• YouTube: potentially inappropriate comments held for review, and a blocked words list.
• LinkedIn: page messaging left off.
• Keyword lists cover words for moving a conversation elsewhere (snap, whatsapp, "add me") and common insults in English and French.
• papoty.eu has no comments or messaging, and an account cannot send or receive messages. Anonymous topic requests are checked before they appear, and a note naming a person or giving contact details is never published.
• When I am away for more than 48 hours, comments are held for review or switched off for that period.

07 Live sessions

Live sessions are on hold. When they restart, each follows these rules, sent in writing to whoever distributes the link.

• Joining: an open public link, or one distributed by the school or parents association. No registration or attendee list; Papoty notes only the participant count.
• Waiting room on, screen sharing by the moderator only, chat to the moderator only, private chat between participants off.
• Everyone in the audience joins with camera and microphone off and appears only as a number in order of arrival (#01, #02, #03), never by name or picture. Participants cannot rename themselves, and nobody can open anyone's profile.
• Questions are written in the chat to the moderator and read out by number ("#07 asks"), never with a name.
• No breakout rooms. No speaker is ever alone with a student.
• Recording: none. Papoty's live sessions are live only: not the speakers, not the participants, not the chat.
• Adults in the audience: Papoty speakers who signed the participation note may attend as participants, under the same rules as everyone: camera and microphone off, chat to the moderator only, no private chat.
• A second adult is present when possible, as co host able to end the session. If nobody is available, I tell the school beforehand.
• Hosting on the school's own licence where possible, so the school's rules apply as well.

If someone behaves inappropriately

• A speaker is muted or removed at once, or the session ends for everyone. Nothing from it is published, the school is told the same day, and the speaker takes no further part until I have reviewed what happened.
• A participant is removed and not readmitted. If what they posted was sexual, hateful or threatening, the session ends and section 08 applies.

08 If something goes wrong

In an emergency, call 112 first. Do not wait for me. "Same day" means that by the end of the day a concern reaches me, the content is down, the person who raised it has an answer, and anyone outside who needs to know has been told. Every case ends in the log described below.

a A student discloses harm or risk in a comment or message

1. Anyone in immediate danger: call 112 with what is known (platform, username, what was written).
2. Use the platform's self harm or safety report; the platform can reach an account I cannot identify.
3. Reply once, kindly, pointing to help: 112 and the right line below. Do not ask for details or promise secrecy. For a private message, this one reply is the only exception to rule 1. A public comment is then hidden so the disclosure does not stay on show.
4. If the message identifies the student's school, pass what was written, and nothing more, to that school's safeguarding contact the same day.
5. Grooming, sexual exploitation, sextortion or a missing child: Child Focus (116 000) and the police.

b Inappropriate content or behaviour by a speaker

1. An unpublished clip is not published. A published clip comes down the same day everywhere Papoty controls.
2. A speaker who contacted a student privately or behaved inappropriately toward one stops taking part at once and is told in writing to end the contact.
3. Any sign of grooming or sexual contact with a minor: Child Focus and the police the same day, and the student's school if known.
4. The speaker is told in writing what was removed and why.

c An account is compromised, or a clip is published without consent

1. Recover the account through the platform's official route, change the password, sign out every session, check two step verification.
2. Remove what the intruder posted. If messages reached students, report it to the platform, say so in one plain public post, and tell any school or parents association that shares Papoty's accounts.
3. A clip published without consent, or showing a student, comes down the same day and the person concerned is told. Reposts are reported to the platforms as an image rights issue, though no one can guarantee every copy is gone.

d A complaint from a school or a parent

1. Acknowledged the same day. If it concerns a student, a named person or safety, the content comes down while I look into it.
2. A reply within seven days with what I found and what changed.
3. If you are not satisfied, say so. For data, the Belgian Data Protection Authority is open to you; for anything criminal, the police.
4. If the complaint shows a gap, this policy changes.

Who to call

Number	Who	When
112	Emergency services: police, ambulance, fire. Free from any phone, anywhere in the EU.	Always, when someone is in immediate danger
101	Police in Belgium, for urgent calls. For anything not urgent, the local police zone, found through police.be.	Always
116 000	Child Focus: missing children and the sexual exploitation of minors, online or offline. Free.	24 hours a day
103	103 Écoute (Écoute-Enfants), for French speaking children and young people. Free and anonymous, also by chat.	Every day, 10:00 to midnight
102	Awel, for Dutch speaking children and young people. Free and anonymous.	Monday to Saturday 16:00 to 22:00, Wednesday from 14:00
0800 32 123	Centre de Prévention du Suicide, in French. Free.	24 hours a day
1813	Zelfmoordlijn, suicide prevention in Dutch. Free and anonymous.	24 hours a day
116 111	Outside Belgium: the national child helpline in many European countries, including Germany, Luxembourg, the Netherlands and Spain. Elsewhere, the local emergency number applies.	Varies by country

Checked on 24 September 2026 against the services' own sites, police.be and the EU's Your Europe page, and again at every review.

Record keeping

Every concern goes in one incident log: date and time, platform and link, what happened in a few factual lines, what I did and when, and who I told. No screenshots of a student's profile unless a report needs them, and never a sexual image of a minor. The log sits in Papoty's own account with two step verification, outside the shared folders, readable only by the safeguarding lead (and a deputy, once named). Entries with personal data are deleted three years after the matter closes, unless the police or a school asks for them to be kept.

09 Data and privacy

Watching Papoty needs no personal data. Nobody signs up to watch, there are no attendee lists, topic requests on papoty.eu are anonymous, and visits are counted without cookies. There are two exceptions.

• The incident log in section 08, which may hold a username and what a student wrote, no more than a concern needs.
• The optional account, from 18 January 2027, for anyone of 16 or over (students, parents, teachers, university students) who wants an email when a video or live session in their fields comes out. It holds an email address, the fields the person is interested in and a role; their own field, a field typed under "Other", a first name and a school only if the person adds them; and the dates needed to show consent. Nobody else sees it: not speakers, not schools, not other users. Speakers may use the same kind of account, only if 18 or over (they confirm it on their recording page), to keep their recording page and participation note in one place; accounts never see each other. There is no password, no profile, no messaging, no advertising and no tracking. Anyone under 16 is asked not to create one, because everything stays open without it. One click in any email stops the alerts, the account page deletes everything at once, and an account nobody signs into for 24 months is deleted.

The alert emails are automatic and one way, about new videos and sessions in the fields the person chose, and one email on 4 February 2027 when the first videos come out, to those whose alerts are on by then. Papoty never writes to an account holder personally, except to answer a request they send about their account or their data, from hello@papoty.eu and about that request only. Rule 1 is unchanged.

Speakers and the alumni contacted about taking part are adults. Their data is covered by the privacy notice at papoty.eu/en/privacy and by Papoty's own GDPR records.

10 Review

This policy is reviewed every September, and also:

• before the first post and before the optional accounts open, both on 18 January 2027, to confirm the section 06 settings and section 09;
• before the first live session;
• when a second person joins Papoty;
• if any money is involved, from anyone;
• after any incident.

It was written without a lawyer or a safeguarding professional, and should be reviewed by both if Papoty ever handles money or grows beyond one person.

Version 1.3, 20 October 2026: an optional account for email alerts from 18 January 2027, for people of 16 and over only, holding the minimum, with no messaging (In one minute, rule 2, sections 02, 06, 09 and 10); in live sessions everyone in the audience appears only as a number in order of arrival (section 07). 1.2, 18 October 2026: speakers come from any secondary school, not only the European Schools; live sessions are never recorded, and Papoty speakers may attend them as participants (sections 04 and 07). 1.1, 6 October 2026: the accounts open on 18 January 2027 for a countdown, so the first post and the settings check move there. 1.0, 24 September 2026, first version Approved by Antoine Wenmacker, designated safeguarding lead Next scheduled review September 2027