COPPA

COPPA for websites and apps, for small businesses.

The Children's Online Privacy Protection Act (COPPA) covers websites and apps for children under 13. TermsFeed writes the section of your Privacy Policy about children, and parental consent stays with your team.

COPPACOPPA Rule, 2025 amendments

By law

When COPPA applies to your business.

COPPA follows the audience of your website or app, and what you know about your users. A general-audience site does not have to check ages, and the rules start once you know a user is under 13.

When COPPA applies to a business, and what the business needs
Your businessWhat you needWhy
Runs a website or app directed to children under 13 Privacy PolicyParental consent The COPPA Rule covers every operator of a website or online service directed to children (16 CFR §312.3).
Runs a general-audience site and learns that a user is under 13 Privacy PolicyParental consent The COPPA Rule covers operators with actual knowledge that they collect personal information from a child, for example when a parent says so (16 CFR §312.3).
Uses cookies or other persistent identifiers on a site for children Parental consent Cookies and IP addresses that recognize a user over time count as personal information (16 CFR §312.2). Only identifiers for internal operations skip parental consent, never behavioral advertising.
Serves teenagers aged 13 and over only Privacy Policy COPPA covers children under 13. Several state privacy laws add rules for minors, such as consent for targeted advertising to teenagers.

What COPPA asks, and the part TermsFeed covers.

The COPPA Rule sets these duties for operators. The Privacy Policy Generator writes the privacy section for children, and the parental consent process stays with your team.

COPPA Rule requirements, with the TermsFeed product where one helps
What the law asksWhere it comes fromHow TermsFeed helps
Post a privacy notice for children, linked from the home page and every place you collect data from children 16 CFR §312.4(d)
  • Privacy Policy Generator
Send a direct notice to parents 16 CFR §312.4(b) and (c)
  • Handled by your team
Get verifiable parental consent before you collect, use or disclose the data of a child 16 CFR §312.5
  • Handled by your team
Get separate parental consent before you disclose the data of a child to third parties 16 CFR §312.5(a)(2), added in 2025
  • Handled by your team
Keep a written data retention policy, and publish it in the notice 16 CFR §312.10, added in 2025
  • Handled by your team
Keep a written information security program 16 CFR §312.8(b), added in 2025
  • Handled by your team

How the Privacy Policy Generator handles the privacy of children.

The Privacy Policy Generator asks whether your website collects data from children under 13, and adds a privacy section for children when you answer yes.

  • A question in the generator

    The questionnaire asks about children under 13, so the Privacy Policy matches your audience.

  • A privacy section for children

    The section covers children under 13 and parental consent, in plain language.

  • A page with a permanent link

    TermsFeed hosts the Privacy Policy on a permanent link, for the footer of your website or the listing of your app.

What the laws ask

What privacy laws expect, and how TermsFeed covers it.

The Federal Trade Commission (FTC) enforces COPPA, and has acted against small companies as well as large ones. The row names the law, when it applies and the part TermsFeed handles.

Consent laws, what is at stake and how Privacy Consent covers each one
Law Applies when What it can cost How TermsFeed covers it
COPPA United States A website or app is directed to children under 13, or the operator knows the website collects data from a child. Civil penalties of up to $53,088 per violation, the figure the FTC keeps for 2026 (16 CFR §312.9).
  • A Privacy Policy with a privacy section for children
  • Free hosting page with a permanent link

A summary for orientation, not legal advice.

Privacy Consent plans.

Every plan includes the consent banner, Google Consent Mode v2 and the Preferences Center. Paid plans add rules by visitor location managed by TermsFeed, more banner loads and more domains. On the Free plan, a banner that keeps using up its banner loads pauses until the next month or an upgrade.

Billing period

Switch to yearly to pay less.

Billed once a year.

Free

One small website that needs a consent banner.

$0 / month / year

  • Included: 1 domain
  • Included: 15,000 banner loads a month
  • Included: 10 vendors
  • Included: Consent log kept 180 days
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines

Pro

A growing business with several websites.

$24 / month

$229 / year

Or $229 a year with yearly billing.

About $19.08 a month. Saves $59 a year against monthly billing.

  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Plus
  • Higher than the plan before: 5 domains
  • Higher than the plan before: 500,000 banner loads a monthThen $0.30 per extra 1,000
  • Higher than the plan before: Unlimited vendors
  • Included: Full consent analytics

Business

High-traffic websites and businesses with many brands.

$59 / month

$569 / year

Or $569 a year with yearly billing.

About $47.42 a month. Saves $139 a year against monthly billing.

  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Unlimited vendors
  • Included: Consent log kept 730 days (24 months)
  • Included: Ongoing regulation monitoring
  • Included: Strict consent logic: the consent banner asks every visitor
  • Included: Google Consent Mode v2 and Microsoft Consent Mode
  • Included: Global Privacy Control (GPC)
  • Included: Preferences Center
  • Included: Consent log export
  • Included: JavaScript callbacks when a visitor accepts or declines
  • Included: Standard consent logic: banner rules by visitor location
  • Included: Geolocation rules managed by TermsFeed
  • Included: Multi-language banner
  • Included: Custom banner colors beyond the light and dark palettes
  • Included: Remove TermsFeed branding
  • Included: Full consent analytics
  • Plus
  • Higher than the plan before: 25 domains
  • Higher than the plan before: 3,000,000 banner loads a monthThen $0.21 per extra 1,000
  • Included: Overage 30% lower than Pro

Prices in US dollars (USD). Cancel your subscription anytime.

Helping businesses since 2012 Free plans available Monthly or yearly billing Cancel anytime

Helping businesses since 2012.

Over 1.9 million customers have created a legal agreement with TermsFeed.

It makes creation of a long Terms and Conditions easier by just putting the important details and ticking some boxes.
Excellent. Very Happy. TermsFeed gave me everything I needed with minimal effort on my part. Their support team is great and able to troubleshoot and make any changes that are needed for your site. Even with email support, Customer Support is very responsive. I have total confidence in using this service and their support.
Elegant solution, reasonable cost and fantastic support.
Great Service! 10 out of 10 experience with them. Very fast and easy to use system. Very quick turnaround times with customer support and super easy system to use.
Termsfeed is really easy to use. I don't need any legal knowledge to create legal documents. It might be pricey for small companies and startups.
TermsFeed is very easy to use with user-friendly interface. It helps me to draw out the Terms & Conditions along with Privacy Policies for the business and stay in grounds with the regulations and compliance. The cookie content for websites is very easy to manage with TermsFeed. The technical support team is great in assisting the users. A little expensive than the other similar products available in the market. The payment interface should be updated to be more clear to the users.
TermsFeed is easy to use and understand. TermsFeed has great customer service and offers many features.
Excellent customer support! Fully functional system at low cost. Easy to understand.

Capterra reviews constitute the subjective opinions of individual end users based on their own experiences and do not represent the views of Capterra or its affiliates.

Frequently asked questions about COPPA.

Answers to the questions small businesses ask about COPPA and the privacy of children.

Does COPPA apply to my website?

COPPA applies to your website when the website is directed to children under 13, or when you know you collect data from a child. A general-audience website does not have to check the age of visitors.

A parent who tells you that a child uses your website gives you that knowledge. From then on, the COPPA rules apply to the data of that child.

Do cookies count as personal information under COPPA?

Yes, cookies and IP addresses that recognize a user over time count as personal information under COPPA. The COPPA Rule calls them persistent identifiers (16 CFR §312.2).

A persistent identifier used only to support the internal operations of the website needs no parental consent. Behavioral advertising never falls under that exception, according to the FTC.

What changed in the 2025 COPPA Rule?

The 2025 COPPA Rule took effect on June 23, 2025, and operators had to comply by April 22, 2026.

Disclosing the data of a child to third parties needs separate parental consent, unless the disclosure is integral to the service. Operators keep a written data retention policy and publish it in the notice. The rule adds a written information security program for every operator. Online contact information now includes mobile phone numbers.

Is a Privacy Policy enough for COPPA?

No, a Privacy Policy covers only the notice part of COPPA. Operators send a direct notice to parents. They get verifiable parental consent before they collect the data of a child, and they keep a retention policy and a security program.

Generate the privacy section for children with the Privacy Policy Generator, and plan the parental consent process with your team.

What are the COPPA penalties?

COPPA violations carry civil penalties of up to $53,088 each. The FTC kept the 2025 figure for 2026.

In 2025 the FTC acted against a small robot toy maker after a third-party software kit in its app collected the location of children without parental consent.

More solutions.

Each solution page lists what a law or a platform asks of your website, and which TermsFeed product covers each part.

GDPR Consent from visitors in the EU before cookies load, with a Privacy Policy and a record of every consent. UK GDPR Consent before cookies under PECR, the 2026 analytics exception, and a Privacy Policy for UK visitors. CCPA+CPRA A Privacy Policy, the Do Not Sell or Share link and Global Privacy Control, for California residents. US state privacy laws Opt-outs, Global Privacy Control and privacy notices for the 19 US states with privacy laws in effect. Canada (PIPEDA and Law 25) PIPEDA consent and Quebec Law 25, with tracking off until Quebec visitors agree. Switzerland (FADP) The FADP privacy notice and the Swiss cookie rules, with opt-in consent for Swiss visitors. LGPD (Brazil) Visitors from Brazil get clear privacy information, a reject button and revocable consent. Shopify Privacy Consent in your theme, connected to the Shopify Customer Privacy API. WordPress Privacy Consent on any WordPress theme, the WordPress Consent API, and free legal pages with AutoTerms. Wix Privacy Consent in Wix Custom Code, with the Wix cookie banner turned off. Squarespace Privacy Consent in Squarespace Code Injection, and Squarespace Analytics in your Cookies Policy. Webflow Privacy Consent in the Webflow Head code, with embeds that wait for consent. Online stores A Privacy Policy, a Return and Refund Policy and a consent banner for stores that sell online. SaaS Terms and Conditions, a Privacy Policy and a consent banner for software sold by subscription. Mobile apps The Privacy Policy and EULA that the Apple App Store and Google Play ask for. Global Privacy Control The browser opt-out signal 10 US states require, honored by Privacy Consent on every plan. Google Consent Mode v2 Consent signals for Google Ads and Google Analytics 4, sent from Privacy Consent with code from the docs.