Medium · Medium Privacy Policy · View original document ↗

Age Restriction and COPPA Compliance

Medium severity High confidence Explicitdocumentlanguage Rare · 5 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Medium recorded 3 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Medium Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Medium's services are not intended for users under 13, and Medium states it will delete any personal data it discovers it has collected from a child under that age.

This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Parents and guardians should be aware that Medium does not have mechanisms to verify user age at sign-up, which means the platform relies on users to self-report compliance with the age restriction.

Consumer impact (what this means for users)

Medium does not permit children under 13 to use its services and commits to deleting data collected from such users if discovered, but the policy does not describe any active age verification mechanism at the point of account creation.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    If you believe a child under 13 has created a Medium account, contact privacy@medium.com to request immediate deletion of the child's account and associated personal data.

How other platforms handle this

Replit Medium

Replit is not directed to children under the age of 13. If you are under 13 years of age, you are not permitted to use the Services. If we learn that we have collected Personal Information from a child under age 13, we will take steps to delete such information from our files as soon as possible.

McDonald's Medium

Our online services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible.

Figma Medium

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information. In some juris...

See all platforms with this clause type →

Monitoring

Medium has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Our services are not directed to children. If we learn that we have collected personal information from a child under the age of 13, we will promptly delete that information.

— Excerpt from Medium's Medium Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision directly engages the Children's Online Privacy Protection Act (COPPA), which prohibits operators of websites and online services from collecting personal information from children under 13 without verifiable parental consent. The FTC is the primary enforcement authority for COPPA violations. The policy's reliance on a reactive deletion approach (deleting data upon discovery) rather than proactive age verification is a recognized compliance gap under COPPA. GOVERNANCE EXPOSURE: Medium. COPPA enforcement actions have historically targeted platforms that did not implement adequate age-screening mechanisms and relied solely on self-reported age or reactive deletion. The absence of proactive verification does not satisfy COPPA's requirements where the platform has actual knowledge that users are under 13. JURISDICTION FLAGS: COPPA applies across the United States to any website or online service directed to children or with actual knowledge of collecting personal information from children. Some states have enacted additional protections for minors online (e.g., California's Age Appropriate Design Code), which may impose obligations beyond COPPA. CONTRACT AND VENDOR IMPLICATIONS: Organizations that use Medium for educational publishing or that have audiences that may include minors should assess whether their use of the platform creates exposure under COPPA or state equivalents. Schools or educational institutions should not direct students under 13 to create Medium accounts. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether Medium's current sign-up flow includes any age-screening mechanism or COPPA-compliant parental consent process. If Medium's content or algorithms could attract users under 13, the adequacy of a reactive deletion approach should be evaluated against FTC COPPA guidance. Parents who believe a child has created a Medium account can contact privacy@medium.com to request deletion.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC is the primary enforcement authority for COPPA violations, including failures to implement adequate age verification or obtain verifiable parental consent before collecting data from children under 13.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Medium Privacy Policy
Entity
Medium
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 10, 2026
Record ID
CA-P-009557
Document ID
CA-D-00246
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
e35f84d3838ccfa621e04fd336ef96e0cfa20727ba6681f8e3e85c0d285d0b9e
Analysis generated
May 10, 2026 19:54 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Medium
Document: Medium Privacy Policy
Record ID: CA-P-009557
Captured: 2026-05-10 19:54:51 UTC
SHA-256: e35f84d3838ccfa6…
URL: https://conductatlas.com/platform/medium/medium-privacy-policy/age-restriction-and-coppa-compliance/
Accessed: May 14, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Medium's Age Restriction and COPPA Compliance clause do?

Parents and guardians should be aware that Medium does not have mechanisms to verify user age at sign-up, which means the platform relies on users to self-report compliance with the age restriction.

How does this clause affect you?

Medium does not permit children under 13 to use its services and commits to deleting data collected from such users if discovered, but the policy does not describe any active age verification mechanism at the point of account creation.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 5 platforms. See the full comparison.

Is ConductAtlas affiliated with Medium?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.