COPPA Compliance

How SafeSpace protects children's privacy online

What is COPPA?

The Children's Online Privacy Protection Act (COPPA) is a United States federal law that imposes requirements on websites and online services directed at children under 13. It requires operators to obtain verifiable parental consent before collecting, using, or disclosing personal information from children.

Our Commitment

SafeSpace is committed to full compliance with COPPA. We understand the importance of protecting children's privacy online and have built our platform with privacy-by-design principles. Our platform is specifically designed for users aged 8-17, and we take extra precautions for users under 13.

Parental Consent Process

For children under 13, we follow this consent process:

1

Age Verification

During registration, the child's date of birth is collected to determine if parental consent is required.

2

Parent Information Collection

If the child is under 13, we collect the parent or guardian's name and email address.

3

Consent Request Email

An email is sent to the parent with a unique, secure consent link. The account remains inactive until consent is granted.

4

Consent Verification

The parent clicks the consent link to approve or deny the account. Consent links expire after 72 hours for security.

5

Account Activation

Only after parental consent is verified will the child's account be activated and usable.

Information Collected from Children

We collect the minimum information necessary to provide our service:

We Collect

  • First and last name
  • Username
  • Email address
  • Date of birth
  • Gender (optional)

We Do NOT Collect

  • Physical address
  • Phone number
  • Social security number
  • Geolocation data
  • Photos of the child

Parental Rights

As a parent or guardian, you have the right to:

  • Review your child's personal information by contacting us
  • Request changes to your child's personal information
  • Revoke consent and request deletion of your child's account and all associated data
  • Refuse further collection of your child's information, which will result in account deactivation

Data Protection Measures

Encryption

All data encrypted in transit and passwords hashed with bcrypt

Content Filtering

Automated moderation filters inappropriate content

Minimal Data

We only collect data essential to platform functionality

Third-Party Services

We use the following third-party services that may process children's data in accordance with COPPA:

  • Stripe: For secure payment processing (only when purchasing courses). Stripe is COPPA-compliant and does not store children's data beyond what is necessary for payment.
  • Hosting Provider: Our servers are hosted with industry-standard security practices.

We do not use advertising networks, analytics trackers, or social media plugins that collect children's data.

Exercise Your Rights

To review, update, or delete your child's information, or to revoke consent, contact us: