Whatnot does not allow children under 13 to use the platform and states it will delete any personal data it discovers was collected from a child under 13.
This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision is required under COPPA, and its effectiveness depends on how robustly Whatnot verifies user ages at sign-up, which the policy does not detail.
Interpretive note: The adequacy of this provision depends on the technical age verification process used at registration, which is not described in the policy, and may be subject to FTC scrutiny if the platform attracts younger users.
Parents who discover their child under 13 has created a Whatnot account can request deletion of that child's data by contacting privacy@whatnot.com, and the policy states Whatnot will delete such data promptly.
How other platforms handle this
Our online services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information as quickly as possible.
Depending on where you live, you may have certain rights with respect to your personal information. These rights may include: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected i...
Replit does not knowingly collect personal information from children under 13. Users between the ages of 13 and 18 may use the platform with parental or guardian consent. If we learn we have collected personal information from a child under 13 without verification of parental consent, we will delete...
Monitoring
Whatnot has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that a child under the age of 13 may have provided us with personal information, please contact us at privacy@whatnot.com.— Excerpt from Whatnot's Whatnot Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages COPPA, enforced by the FTC, which requires verifiable parental consent before collecting personal information from children under 13 in the United States. The policy's reliance on a 'not knowingly collecting' standard is the baseline COPPA framework but may be insufficient if the platform's content or marketing is attractive to minors, as the FTC has pursued enforcement based on actual knowledge and contextual indicators. GOVERNANCE EXPOSURE: Medium. The policy does not describe the age verification mechanism used at registration. If Whatnot's user base or content is likely to attract users under 13, a 'we do not knowingly collect' disclaimer alone may not satisfy COPPA obligations under FTC enforcement standards. JURISDICTION FLAGS: US-wide COPPA obligations apply. Some US states have enacted additional children's privacy protections, including California's Age-Appropriate Design Code (AADC), which extends protections to users under 18 and imposes design obligations beyond COPPA. The UK Children's Code imposes similar obligations for UK users. CONTRACT AND VENDOR IMPLICATIONS: Third-party advertising and analytics vendors receiving data from Whatnot should be assessed to confirm COPPA-compliant data processing agreements are in place and that no child-derived data is being used for advertising targeting. COMPLIANCE CONSIDERATIONS: Compliance teams should review the technical age-gating mechanism at registration to assess whether it meets FTC COPPA guidance, and evaluate whether California's AADC and the UK Children's Code impose additional design or data minimization obligations on the platform.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision is required under COPPA, and its effectiveness depends on how robustly Whatnot verifies user ages at sign-up, which the policy does not detail.
Parents who discover their child under 13 has created a Whatnot account can request deletion of that child's data by contacting privacy@whatnot.com, and the policy states Whatnot will delete such data promptly.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.