COPPA Compliance

Children's Online Privacy Protection

Information for Parents & Guardians

Our COPPA Commitment

QuestMaker complies with the Children's Online Privacy Protection Act (COPPA), a federal law designed to protect the privacy of children under 13 years old. We are committed to safeguarding your children's information with the highest standards of privacy and security.

1

What is COPPA?

The Children's Online Privacy Protection Act (COPPA) is a U.S. federal law enacted in 1998 that regulates how websites and online services collect, use, and disclose personal information from children under 13.

COPPA requires websites to:

Obtain verifiable parental consent before collecting children's data
Provide clear notice of data collection practices
Allow parents to review and delete children's information
Maintain reasonable security measures
Not condition participation on unnecessary data collection
2

How QuestMaker Complies with COPPA

Parental Control & Consent

QuestMaker is designed exclusively for adults (parents, guardians, teachers) to create scavenger hunts for children:

Adult-Only Accounts (18+)
Parental Supervision Required
No Direct Child Access
Implicit Parental Consent

Important: As a parent or guardian, you are responsible for determining whether QuestMaker is appropriate for your children. We recommend reviewing all generated content before using it with children.

What We Never Do

Allow children to create accounts
Display advertisements to children
Use children's data for marketing
Sell or share children's information
Track children's online behavior
Send promotional emails to children
3

Minimal Data Collection

We collect the absolute minimum information necessary to provide our service:

Information Purpose Retention
👤 Child's first name
Personalize hunt cards Until deletion
🎂 Child's age
Age-appropriate clues Until deletion
🎨 Theme preference
Customize card artwork Until deletion

We do NOT collect:

Children's last names or full names
Birthdates or specific ages
Email addresses or contact info
Home addresses or geolocation
Photos of children (unless uploaded)
School information

Temporary Photo Storage

If you choose to upload photos for custom card artwork:

Optional - not required
Auto-deleted after 30 days
Never used for AI training
Delete anytime manually

Third-Party AI Services

We use two AI services to generate hunt content:

🤖 Anthropic Claude

Clue Generation

✓ Does NOT store or use data for training

🎨 Google Gemini

Image Generation

✓ Does NOT use images for training

Important: We have API agreements with both providers that prohibit using uploaded data for AI training. Your children's information is processed solely for generating your hunt cards.

4

Your Rights as a Parent or Guardian

Right to Review

View all hunts, children's information, clues, and artwork in your dashboard anytime.

Right to Delete

Delete individual hunts, uploaded photos, or your entire account. Data removed within 48 hours.

Right to Refuse

Stop data collection by not creating hunts, deleting your account, or using AI artwork only.

Right to Export

Download all hunt cards as PNG images anytime. Full data export (JSON/CSV) coming soon.

How to Exercise Your Rights

⚙️

Self-Service

Use your dashboard

📧

Email Us

[email protected]

🗑️

Delete Account

Profile → Delete Account

5

Security Measures

We protect your children's information with industry-standard security practices:

Encryption

HTTPS/SSL

Passwords

Bcrypt hashed

Secure Hosting

DigitalOcean

Access Controls

Limited access

Daily Backups

Encrypted

Auto Cleanup

Scheduled jobs

Questions or Concerns?

If you have any questions about our COPPA compliance or children's privacy practices:

Your Children's Privacy is Our Priority

We understand the trust you place in us when creating scavenger hunts for your children. We are committed to maintaining the highest standards of privacy, security, and child safety.