COPPA Compliance
How SafeSpace protects children's privacy online
What is COPPA?
The Children's Online Privacy Protection Act (COPPA) is a United States federal law that imposes requirements on websites and online services directed at children under 13. It requires operators to obtain verifiable parental consent before collecting, using, or disclosing personal information from children.
Our Commitment
SafeSpace is committed to full compliance with COPPA. We understand the importance of protecting children's privacy online and have built our platform with privacy-by-design principles. Our platform is specifically designed for users aged 8-17, and we take extra precautions for users under 13.
Parental Consent Process
For children under 13, we follow this consent process:
Age Verification
During registration, the child's date of birth is collected to determine if parental consent is required.
Parent Information Collection
If the child is under 13, we collect the parent or guardian's name and email address.
Consent Request Email
An email is sent to the parent with a unique, secure consent link. The account remains inactive until consent is granted.
Consent Verification
The parent clicks the consent link to approve or deny the account. Consent links expire after 72 hours for security.
Account Activation
Only after parental consent is verified will the child's account be activated and usable.
Information Collected from Children
We collect the minimum information necessary to provide our service:
We Collect
- First and last name
- Username
- Email address
- Date of birth
- Gender (optional)
We Do NOT Collect
- Physical address
- Phone number
- Social security number
- Geolocation data
- Photos of the child
Parental Rights
As a parent or guardian, you have the right to:
- Review your child's personal information by contacting us
- Request changes to your child's personal information
- Revoke consent and request deletion of your child's account and all associated data
- Refuse further collection of your child's information, which will result in account deactivation
Data Protection Measures
Encryption
All data encrypted in transit and passwords hashed with bcrypt
Content Filtering
Automated moderation filters inappropriate content
Minimal Data
We only collect data essential to platform functionality
Third-Party Services
We use the following third-party services that may process children's data in accordance with COPPA:
- Stripe: For secure payment processing (only when purchasing courses). Stripe is COPPA-compliant and does not store children's data beyond what is necessary for payment.
- Hosting Provider: Our servers are hosted with industry-standard security practices.
We do not use advertising networks, analytics trackers, or social media plugins that collect children's data.
Exercise Your Rights
To review, update, or delete your child's information, or to revoke consent, contact us: