COPPA Compliance Statement

1. What is COPPA?

The Children's Online Privacy Protection Act (COPPA) is a federal law designed to protect the privacy of children under 13 years of age. COPPA requires websites and online services directed at children, or that knowingly collect personal information from children, to:

• Obtain verifiable parental consent before collecting personal information from children
• Provide parents with the ability to review and delete their child's information
• Limit the collection of personal information to only what is necessary
• Implement reasonable security measures to protect children's data
• Not condition a child's participation on providing more information than necessary

Learn more: FTC COPPA Information

2. How WhitelistVideo Complies with COPPA

2.1 No Direct Collection from Children

WhitelistVideo operates under the following principles:

• Parent-Only Accounts: Only parents/guardians can create WhitelistVideo accounts
• No Child Registration: Children cannot sign up, create profiles, or enter personal information
• No Child-Facing Website: Our website (whitelist.video) is designed for parents, not children
• Extension Interaction: The Chrome extension used by children does NOT collect personal information—it only enforces parent-defined rules

2.2 What Information We Collect About Children

WhitelistVideo is designed with privacy-first principles. We collect minimal information from parents to create safe profiles for their children:

Parent-Provided Profile Information (Stored on Parent Account)

Nickname or Display Name (Required)

• Parents create a friendly display name for their child's profile
• We strongly recommend using a nickname or pseudonym (e.g., "Buddy", "Kiddo", "Champ")
• This name is only visible to the parent and is never shared
• Real names are not required or encouraged

Age Range (Required for Content Safety)

• Parents select their child's age range to enable age-appropriate content filtering
• Age information is used exclusively for AI-powered content analysis
• This ensures videos are evaluated against appropriate maturity standards
• Age data is stored as a range category, not an exact birthdate

Profile Customization

• Avatar emoji selection (optional)
• Color theme preference (optional)
• These are for visual personalization only

What We Explicitly Do NOT Collect From or About Children

• No child's real name (nicknames only)
• No exact birthdate or date of birth
• No child email address or direct contact information
• No school information or location data
• No photos or biometric data
• No Social Security numbers or government IDs
• No personal social media accounts or online identifiers

Activity Monitoring for Parental Oversight

To give parents confidence that their child is protected, we maintain anonymous usage logs that help parents understand:

• Videos viewed and blocked (for parental review)
• Time spent watching approved content
• Content filtering decisions made by AI

Privacy Safeguards:

• This activity data is never linked to personally identifiable information
• Data is stored against the parent's account (not the child's identity)
• Information is never shared with third parties, advertisers, or external organizations
• Parents have full control to review and delete this data at any time
• Activity logs cannot be traced back to any child's real identity

This monitoring exists solely to:

1. Give parents visibility into content filtering effectiveness
2. Allow parents to refine whitelists based on viewing patterns
3. Provide transparency into what their child is watching

Important: Because profiles use nicknames and contain no direct identifiers, activity logs represent anonymous viewing patterns associated with a parent-controlled profile, not a tracked child identity.

2.3 Parental Consent & Control

Parents have 100% control over all aspects of the service:

• Profile Creation: Only parents can create child profiles
• Information Management: Parents can view, edit, or delete any child profile information at any time
• Consent: By creating a child profile, parents provide consent for the limited information we store
• Data Deletion: Parents can request immediate deletion of all data by contacting coppa@whitelist.video

3. How Our Service Protects Children

3.1 Extension Architecture

The WhitelistVideo Chrome extension installed on a child's device:

• Does NOT collect browsing history
• Does NOT track websites visited
• Does NOT monitor keystrokes or form inputs
• Does NOT capture screenshots or video recordings
• Only blocks video playback until parent approval is received

3.2 Data Minimization

We follow the principle of data minimization:

• We collect only the minimum information necessary to provide the service
• Child profiles contain only a nickname (which can be anonymous) and age range
• No sensitive personal information is required or collected

3.3 No Third-Party Sharing

We do NOT share children's information with third parties for:

• ❌ Marketing or advertising
• ❌ Data analytics
• ❌ Profiling or behavioral targeting
• ❌ Sale or rental of data

The only data shared with third parties is parent account information (email, payment processing) as described in our Privacy Policy.

3.4 Security Measures

We implement strong security to protect all data:

• TLS/SSL encryption for all data transmission
• Encrypted database storage
• Parent password hashing with bcrypt
• Strict access controls for employees
• Regular security audits

4. Parental Rights Under COPPA

As a parent or legal guardian, you have the following rights:

5. What Children CANNOT Do on WhitelistVideo

To ensure COPPA compliance, children using WhitelistVideo cannot:

• ❌ Create accounts
• ❌ Enter personal information
• ❌ Communicate with other users or strangers
• ❌ Post content publicly
• ❌ Make purchases
• ❌ Share data with third parties
• ❌ Access the WhitelistVideo website or PWA
• ❌ Modify settings or disable the extension

Children can only: Request approval to watch videos. All other actions are parent-controlled.

6. Age Verification

WhitelistVideo relies on parents to truthfully represent their role as parent/guardian and the ages of their children.

6.1 Adult Account Requirement

• Account creation requires an email address and payment method (for paid tiers)
• We verify that account creators are 18+ through our Terms of Service
• Children cannot create accounts as they lack payment methods and email addresses

6.2 No Child Access to Website

Our website (whitelist.video) is not directed at children and contains no child-oriented content or features.

7. Data Retention

We retain child profile information only as long as necessary to provide the service:

• Active Accounts: Child profile data retained while parent account is active
• Deleted Profiles: Permanently deleted within 30 days of deletion request
• Inactive Accounts: If no login for 2+ years, we may delete the account after email notification

8. Updates to This Statement

We may update this COPPA Compliance Statement from time to time. When we make material changes:

• We will update the "Last Updated" date at the top
• We will notify parents via email at least 30 days in advance
• Parents will have the opportunity to withdraw consent by deleting child profiles

9. Contact Us About COPPA

If you have questions or concerns about how we protect children's privacy:

Federal Trade Commission (FTC)

If you believe we are not in compliance with COPPA, you may file a complaint with the FTC:

10. Frequently Asked Questions