Legal
COPPA: children's privacy
Binding policy. Plain language where we can. No surprises buried in footnotes.Last updated: 2026-04-23We publish changes here before they take effect.
This notice explains how Confinity Ltd ("we", "us", "our") handles the Children's Online Privacy Protection Act (COPPA) in the United States, and the equivalent children's-data protections we apply globally.
We do not currently ask for a date of birth. Sign-up is a magic link sent to an email address, and no age field exists on either side of it, so there is no automated age screen to describe. This section previously said there was one, and that was wrong. What runs today is an age notice driven by browser locale and time zone, which is a prompt rather than a check. A real screen at sign-up is on the roadmap alongside the UK-AADC impact assessment, and it will be described here once it exists rather than before.
Sometimes a minor creates an account under a false age and we find out later, either because a reviewer flags a signal or because a parent contacts us. When that happens we suspend the account, delete the content and the personal data, and send a suppression notice for that email address.
A parent or legal guardian can contact us at privacy@confinity.com with a verification document (photo ID plus a same-day handwritten note with the child's account email) to:
Memorial pages for a deceased child can only be created by a verified legal next-of-kin (parent or court-appointed guardian) using the verification flow on /app/remembrance. We apply the strictest contributor scope and do not allow public indexing by default.
Our sub-processor list is published at /trust/centre/subprocessors. No sub-processor on that list may use Confinity data to advertise to children.
For any COPPA or children's-data question: privacy@confinity.com. If a delay would put a child at risk, write "URGENT: CHILD" in the subject and we will respond inside one business day.
The short version
- Confinity is not directed at children under 13.
- You must be at least 13 years old to create an account. In some regions the minimum age is higher (for example 16 in parts of the EU); we honour the stricter local rule.
- We do not knowingly collect personal information from a child under 13. If we learn that we have, we delete it.
- We do not use persistent identifiers to track children across contexts for advertising or other purposes.
Age screening at sign-up
Parental / guardian requests
- Confirm whether an account exists.
- Review what personal information was collected.
- Request deletion of the account and any associated content.