A small tech company in Sacramento runs after-school coding classes and an app where kids save their projects. A parent asks what data the app collects about her 10-year-old and who can see it. The founder realizes he has never written a clear answer.
Parents look closely at any business that collects information about their children. Federal law also sets specific requirements for websites and online services directed to kids.
What COPPA Covers
The Children’s Online Privacy Protection Act, known as COPPA, applies to operators of websites and online services directed to children under 13, and to general-audience services that knowingly collect personal information from children under 13. The Federal Trade Commission enforces it and updated the COPPA Rule in 2025.
Personal information under COPPA includes names, addresses, email addresses, phone numbers, photos, voice recordings, geolocation, and persistent identifiers used to track users. Covered operators generally must obtain verifiable parental consent before collecting this information. Families often compare several providers, and clear privacy information can decide which one they trust.
Practical Steps for Small Tech Businesses
Collect only the information you truly need. A coding class signup can ask parents, not children, for contact details. Post a clear privacy policy that explains what you collect, why, how long you keep it, and how parents can review or delete their child’s information.
Check the tools you build with, such as analytics, advertising, and chat features, since third-party code can collect data too. The FTC publishes guidance and a compliance FAQ for businesses. A privacy attorney can review your setup if your product handles children’s data.
Show Parents You Take Privacy Seriously
Make your privacy policy easy to find from your homepage, signup pages, and app store listing. Write a short parent-friendly summary at the top. Answer parent questions quickly and clearly. Train staff who answer phones to explain your privacy practices in simple terms.
Parents often check several sources before trusting a company with their children’s information. Tech businesses listed in the Communication and Technology category on Family Friendly Sites can mention their privacy practices and age range in the listing description. Keep your Family Friendly Sites listing linked to your privacy policy page.
Earn Parents’ Trust Before They Sign Up
Businesses that serve kids online need clear privacy practices and, when COPPA applies, verifiable parental consent. Collect only what you need, publish a readable privacy policy, review your third-party tools, and seek legal guidance where needed. Clear information on your website and directories like Family Friendly Sites helps parents choose with confidence.
Frequently Asked Questions
Does COPPA apply to my business?
COPPA applies if your website or online service is directed to children under 13, or if you have actual knowledge that you collect personal information from children under 13. Factors include your content, audience, and design. The FTC's COPPA FAQ and a privacy attorney can help you decide.
What is verifiable parental consent?
It is a process to confirm that a parent, not the child, agreed to the collection of the child's personal information. The FTC recognizes several methods, such as signed consent forms or payment card verification in certain cases. The right method depends on how you use the data.
Does COPPA apply to in-person classes?
COPPA covers online collection of information from children. If parents register their children through an online form that you design for parents, different considerations apply than if children enter data themselves. Review how your online systems collect information to understand your obligations.
What should a kid-friendly privacy policy include?
Explain what information you collect, how you use and share it, how long you keep it, and how parents can review, change, or delete their child's information. Include contact details for privacy questions. Use plain language and add a short summary at the top.
Keep reading
Website Trust Basics Every Property Manager and Real Estate Office Should Have
A renter in Orlando starts filling out a rental application on a property management website. Her browser shows a “Not secure” warning next to...
Read article
How Small Businesses Can Spot Risky Link-Building Offers Before They Pay
A dental office manager in Tucson receives an email offering “500 high-authority backlinks” for $99, with guaranteed first-page rankings in 30 days. Another vendor...
Read article