Under COPPA, covered sites and apps generally need your verifiable consent before collecting personal information from a child under 13. You can ask to review what they hold, withdraw consent, request deletion, and allow collection while blocking sharing. Problems can be reported to the FTC.
Who and what it covers
The FTC says the rule protects children under 13. It applies to sites and services aimed at children, and to general audience sites that have actual knowledge they collect information from children under 13. Teens are not covered by COPPA, though the FTC has said it is concerned about teen privacy.
Protected information includes names, contact details, location, photos and recordings, government ID numbers, biometric data and persistent identifiers such as IP addresses.
What operators must do
Operators must give parents direct notice and a plain-language privacy policy. The FTC's FAQ says a simple email linking to the policy is not enough. Consent methods it lists include a signed form, a credit or debit card transaction, a call to a staffed toll-free number, or checking a government ID, which must be deleted promptly.
Your options as a parent
According to the FTC you can:
- Decide whether you are comfortable with a site's practices.
- Consent to collection and internal use while refusing disclosure to third parties, unless disclosure is integral to the service and clearly explained.
- Review the information collected about your child, after the site verifies your identity.
- Withdraw consent.
- Ask for deletion and refuse further collection or use.
A practical request
Write to the operator's privacy contact. Say you are the child's parent, name the account, and state which right you are using. Keep a copy and a date. Expect an identity check before they show you data.
If you believe a site has broken the rules, report it at ReportFraud.ftc.gov.
What about older children?
COPPA does not cover teens, so consent flows stop at 13. For older teens, rely on account privacy settings and open conversation. See seven tips for keeping children safe online.
If you work on the business side, our posts on COPPA steps for youth programs and actual knowledge cover the obligations from the operator view.
Quick check
Does COPPA protect my 15 year old?
No. The FTC says COPPA covers children under 13.
Can I let an app collect data but not share it?
The FTC says parents can consent to collection and internal use while prohibiting disclosure to third parties, unless disclosure is integral to the service and clearly disclosed.
Sources
Last reviewed: 19 October 2026.
