COPPA Compliance Audit

coppa-compliance · v1.1.0 · paid

Children's Online Privacy Protection Act compliance covering age determination, parental consent, data minimization for children, and operator obligations.

Age Determination

age-determination · weight 0.28

Age verification mechanism exists before data collection from potential children
ab-000813
critical
Age gate uses neutral design; does not coach children to lie about their age
ab-000814
high
Users under 13 blocked from accounts or routed to COPPA-compliant experience
ab-000815
high
Age gate cannot be trivially bypassed by refreshing, clearing cookies, etc.
ab-000816
medium

Parental Consent

parental-consent · weight 0.28

Verifiable parental consent obtained before collecting PI from children under 13
ab-000817
critical
Consent method uses an FTC-approved mechanism
ab-000818
high
Parental consent records maintained with timestamp, method, parent identity
ab-000819
medium
Parents can review children's data and revoke consent at any time
ab-000820
medium
Consent request clearly describes what data is collected and how it is used
ab-000821
low

Data Minimization for Children

child-data · weight 0.24

No behavioral or interest-based advertising targeting children
ab-000822
critical
No persistent identifiers for cross-site tracking of children
ab-000823
high
Only data reasonably necessary for the child's activity is collected
ab-000824
medium
Geolocation not collected from children without parental consent
ab-000825
low
Social features disabled for children without parental consent
ab-000826
low

Operator Obligations

operator-obligations · weight 0.2

Privacy policy specifically addresses children's data practices
ab-000827
low
Direct notice provided to parents before collecting children's PI
ab-000828
info
Children's data retained only as long as necessary; then deleted
ab-000829
info
Third parties receiving children's data contractually bound to COPPA
ab-000830
info