We take internet security serious...

We at KRE8ivU take children’s safety on the web very seriously. Therefore we do not allow any users under the age of 13, UNLESS they are part of an EDU Account with a Walled Garden.

Soundtrap for Education is fully compliant with the Children’s Online Privacy Protection Act (COPPA), thanks to the online privacy features that are included. These include the following:

Minimal profile. Only allows for the first name and last name to be stored in the profile. No profile picture, tags, location or description will be stored.

Below you can read about the COPPA law.

“The primary goal of COPPA is to allow parents to have control over what information is collected online from their children under age 13. The law applies to any operators of websites, online services including web-based testing, programs or “apps” that collect, use, or disclose children’s personal information, whether at home or at school. However, COPPA only applies to personal information collected online from children; it does not cover information collected from adults that may pertain to children.

The personal information can include the child’s name, email, phone number or other persistent unique identifier, and information about parents, friends and other persons. The law recognizes that the school can consent on behalf of the parent to create accounts and enter personal information into the online system– but only where the operator collects personal information for the use and benefit of the school, and for no other commercial purpose. Unfortunately, many schools fail to engage in proper due diligence in reviewing third-party privacy and data-security policies, and inadvertently authorize data collection and data-mining practices that parents find unacceptable.

What rights do parents have under COPPA when online programs are used in schools?

The FTC revised guidance on best practices in March 2015, shifting some parental rights to schools. If your under-13 child is participating in an online program from a service provider or commercial website collecting personal information, whether for instructional, testing, or other purposes, the school and/or vendor or service provider must provide your school with a clear and prominent privacy policy and use practices on its website or elsewhere, including the following:

  1. The name, address, telephone number, and email address of the vendors collecting or maintaining personal information through the site or service;
  2. A description of what personal information the operator is collecting, including whether the website or program enables children to make their personal information publicly available, how the operator uses such information, and the operator’s disclosure practices for such information; and
  3. That the school can review or have deleted the child’s personal information and refuse to permit its further collection or use, and provide the procedures for doing so.

Best practice on the part of the school would also be to require written consent from parents if their child under 13 is using such a program, especially if the program contains ads or any marketing material.

In any event, when an online operator receives consent from the school, the operator must, upon request, provide schools with the following:

  1. A description of the types of personal student data collected;
  2. An opportunity to review a student’s information and/or have it deleted;
  3. The ability to prevent the online program from any further use or collection of a student’s personal information.”

For FAQs on COPPA, see here: http://www.business.ftc.gov/documents/0493-Complying-with-COPPA-Frequently-Asked-Questions

https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions