I'll second the idea of letting them explore browser developer tools (assuming they have access to a computer). I teach elementary school as part of my job, and

I'll second the idea of letting them explore browser developer tools (assuming they have access to a computer). I teach elementary school as part of my job, and it's such an empowering experience for them. When I do a lesson on privacy, I set up this special website that uses some known security issues to expose to them the difference between what a company/site may be "telling you" with what's actually going on under the hood and is possible. They absolutely love it.