COPPA Compliance Statement

1. What is COPPA?

The Children's Online Privacy Protection Act (COPPA) is a federal law designed to protect the privacy of children under 13 years of age. COPPA requires websites and online services directed at children, or that knowingly collect personal information from children, to:

• Obtain verifiable parental consent before collecting personal information from children
• Provide parents with the ability to review and delete their child's information
• Limit the collection of personal information to only what is necessary
• Implement reasonable security measures to protect children's data
• Not condition a child's participation on providing more information than necessary

Learn more: FTC COPPA Information

2. How WhitelistVideo Complies with COPPA

2.1 No Direct Collection from Children

WhitelistVideo operates under the following principles:

• Parent-Only Accounts: Only parents/guardians can create WhitelistVideo accounts
• No Child Registration: Children cannot sign up, create profiles, or enter personal information
• No Child-Facing Website: Our website (whitelist.video) is designed for parents, not children
• Extension Interaction: The Chrome extension used by children does NOT collect personal information—it only enforces parent-defined rules

2.2 What Information We DO Collect

From Parents (Adults 18+):

• Parent email address
• Parent account password (hashed)
• Payment information (processed by Stripe, not stored by us)
• Parent preferences and settings

About Children (Parent-Provided):

• Nickname or first name (can be pseudonym)
• Age range (e.g., 8-10, 11-13, 14-15) - for age-appropriate filtering
• Approved video whitelist (managed by parent)

What We DO NOT Collect from Children:

• ❌ Last names
• ❌ Exact birthdates
• ❌ Home addresses or phone numbers
• ❌ Photos or videos
• ❌ Social Security numbers
• ❌ Email addresses for children
• ❌ Browsing history or viewing behavior
• ❌ Geolocation data
• ❌ School names or addresses

2.3 Parental Consent & Control

Parents have 100% control over all aspects of the service:

• Profile Creation: Only parents can create child profiles
• Information Management: Parents can view, edit, or delete any child profile information at any time
• Consent: By creating a child profile, parents provide consent for the limited information we store
• Data Deletion: Parents can request immediate deletion of all data by contacting coppa@whitelistvideo.com

3. How Our Service Protects Children

3.1 Extension Architecture

The WhitelistVideo Chrome extension installed on a child's device:

• Does NOT collect browsing history
• Does NOT track websites visited
• Does NOT monitor keystrokes or form inputs
• Does NOT capture screenshots or video recordings
• Only blocks video playback until parent approval is received

3.2 Data Minimization

We follow the principle of data minimization:

• We collect only the minimum information necessary to provide the service
• Child profiles contain only a nickname (which can be anonymous) and age range
• No sensitive personal information is required or collected

3.3 No Third-Party Sharing

We do NOT share children's information with third parties for:

• ❌ Marketing or advertising
• ❌ Data analytics
• ❌ Profiling or behavioral targeting
• ❌ Sale or rental of data

The only data shared with third parties is parent account information (email, payment processing) as described in our Privacy Policy.

3.4 Security Measures

We implement strong security to protect all data:

• TLS/SSL encryption for all data transmission
• Encrypted database storage
• Parent password hashing with bcrypt
• Strict access controls for employees
• Regular security audits

4. Parental Rights Under COPPA

As a parent or legal guardian, you have the following rights:

5. What Children CANNOT Do on WhitelistVideo

To ensure COPPA compliance, children using WhitelistVideo cannot:

• ❌ Create accounts
• ❌ Enter personal information
• ❌ Communicate with other users or strangers
• ❌ Post content publicly
• ❌ Make purchases
• ❌ Share data with third parties
• ❌ Access the WhitelistVideo website or PWA
• ❌ Modify settings or disable the extension

Children can only: Request approval to watch videos. All other actions are parent-controlled.

6. Age Verification

WhitelistVideo relies on parents to truthfully represent their role as parent/guardian and the ages of their children.

6.1 Adult Account Requirement

• Account creation requires an email address and payment method (for paid tiers)
• We verify that account creators are 18+ through our Terms of Service
• Children cannot create accounts as they lack payment methods and email addresses

6.2 No Child Access to Website

Our website (whitelist.video) is not directed at children and contains no child-oriented content or features.

7. Data Retention

We retain child profile information only as long as necessary to provide the service:

• Active Accounts: Child profile data retained while parent account is active
• Deleted Profiles: Permanently deleted within 30 days of deletion request
• Inactive Accounts: If no login for 2+ years, we may delete the account after email notification

8. Updates to This Statement

We may update this COPPA Compliance Statement from time to time. When we make material changes:

• We will update the "Last Updated" date at the top
• We will notify parents via email at least 30 days in advance
• Parents will have the opportunity to withdraw consent by deleting child profiles

9. Contact Us About COPPA

If you have questions or concerns about how we protect children's privacy:

Federal Trade Commission (FTC)

If you believe we are not in compliance with COPPA, you may file a complaint with the FTC: