H5P plugin security and privacy assessment

H5P plugin security and privacy assessment

by Beatriz Rojo -
Number of replies: 2

Hi there,

we are installing Moodle and would like to install H5P as a plugin. Before it, we need to conduct a Security and Privacy assessment. We've been collecting information from the H5P.org forums and homepage, but would like to ask if someone has already done such a check and have it handy as a structured text? Or could someone with experience on the plugin confirm or correct the following information?

  • What is stored in H5P?

Only information about which authors created when which activities is sent to h5p.org. This information is anonymous and it can be disabled in the plugin settings.

The learners' records are only saved in Moodle 

  • What kind of access does H5P have to our Moodle?

H5P doesn't access to Moodle in any way, it's just the interface that is integrated, but "what happens there" is stored only in Moodle.

  • Who logs into H5P and how? 

No one logs into H5P in any way.

Thanks a lot!

Average of ratings: -
In reply to Beatriz Rojo

Re: H5P plugin security and privacy assessment

by Jon Bolton -
Picture of Particularly helpful Moodlers Picture of Testers
So you want to question the answers that the h5p developers gave you about the h5p Moodle plugin that the h5p developers wrote...? But yes, the answers are in line with my understanding of how the plugin works.
In reply to Jon Bolton

Re: H5P plugin security and privacy assessment

by Beatriz Rojo -
Hi Jon,
the answers were written by us, we summarised the information that is spread throughout the different sites of h5p.org. If they make sense to you, this is all I needed to know! smile Thanks!