Who COPPA covers
COPPA (Children's Online Privacy Protection Act, 15 U.S.C. §§ 6501–6506) applies to operators of websites and online services directed to children under 13, plus general-audience services with actual knowledge that they have under-13 users. If your app appears in the App Store Kids Category or Google Play Designed for Families, COPPA applies even if your audience is mostly older.
Verifiable parental consent
Before collecting personal information from a child, you must obtain verifiable parental consent. The FTC accepts five methods: signed consent form, credit card transaction, toll-free phone call, video call, or government-ID check. Email-plus (email then a confirming email after a delay) is allowed only for limited internal uses. The generator describes whichever method you select.
What you cannot do
- Behavioural advertising or remarketing pixels
- Third-party analytics SDKs that profile users
- Persistent identifiers used for anything beyond internal operations
- Selling personal information of any kind
The generator removes ad SDKs from the policy automatically when you select "directed to children".