Microsoft requires parental consent before children under 13 (or the applicable local age) can create a Microsoft account, and limits data collection for children's accounts in line with COPPA.
Parents should set up Microsoft Family Safety accounts for children under 13 to ensure parental consent requirements are met and to exercise rights to review and delete their child's personal data collected by Microsoft.
How other platforms handle this
The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the types of information listed above. Some of these technologies may create small files or record-keeping tools stored on your device. These technologies help us recognize your device and collect...
You agree that you will not... Scrape or copy profiles and other data from our Services through any means (including crawlers, browser plugins and add-ons, and any other technology or manual work); ... Use bots or other automated methods to access the Services, add or download contacts, send or redi...
We collect data when you use, or visit services on, our Services, including when you're not logged in. This includes devices (e.g., device ID, browser type, operating system, IP address), locations (e.g., using IP addresses, GPS or Wi-Fi), and actions (e.g., feature use, clicks, views, search querie...
If your child uses Microsoft products independently without parental oversight, their data may still be collected unless a family account with proper parental controls is in place, and parents have the right to access and delete their child's data.
REGULATORY FRAMEWORK: This provision implicates COPPA (15 U.S.C. §§6501–6506) and FTC COPPA Rule (16 C.F.R. Part 312), requiring verifiable parental consent before collecting personal information from children under 13 (FTC enforcement); GDPR Art. 8 and recital 38 (age of digital consent, 16 years unless member state sets lower, minimum 13); UK GDPR and ICO Age Appropriate Design Code (requiring 'best interests of the child' standard for all products likely accessed by under-18s); and CCPA/CPRA §1798.120 (opt-out rights for minors under 16). Enforcement by FTC (COPPA), EU DPAs, and ICO.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.