Children's Privacy (COPPA)

1. Overview

The Children's Online Privacy Protection Act (COPPA) is a U.S. federal law that protects the privacy of children under 13. SantaBook takes children's privacy seriously and has designed our platform with COPPA compliance in mind.

SantaBook is a business tool for adult professional Santa portrayers. We do not market to children, collect data directly from children, or allow children to create accounts.

2. How Children's Data May Enter SantaBook

In the course of their Santa portrayal business, a portrayer may choose to record information about children in SantaBook — for example, a child's name and gift list when preparing for a personalized visit or letter.

When this happens, the portrayer is the party collecting the information from the parent or guardian. SantaBook acts as a data processor on the portrayer's behalf, storing and displaying the data the portrayer entered.

3. Portrayer Responsibilities

If you are a Santa portrayer using SantaBook and you record information about a child under 13, you are responsible for:

• Obtaining verifiable parental consent before collecting or recording the child's personal information.
• Limiting collection to what is reasonably necessary for the portrayal service (e.g., first name and gift preferences — not Social Security numbers or detailed personal records).
• Honoring any parent's request to review, correct, or delete their child's information.
• Keeping your own record of that consent. SantaBook gives you a parental consent log where you can note the date and how consent was obtained. This log is your own bookkeeping. It records that you obtained consent. It is not a way of obtaining consent, and on its own it does not satisfy the verified parental consent requirement.

SantaBook's consent log and deletion tools help you keep track of what you have agreed with each family. They do not obtain consent on your behalf. Obtaining verified parental consent from the parent or guardian is your responsibility as the business collecting the information.

4. What SantaBook Does

As a platform, SantaBook:

• Does not knowingly collect personal information directly from children under 13.
• Does not allow children to create accounts. Some Santa storefronts include a public Game Room with holiday games. A child may play these games without an account. The games themselves run inside the child's own web browser and do not send anything the child types or plays back to SantaBook.
• Does not use children's data for advertising, profiling, or any purpose other than delivering the portrayer's service.
• Does provide portrayers with a parental consent log to record parental consent.
• Does support data deletion requests — both through the app and via email.
• Does encrypt all stored data and restrict access to authorized personnel only.

5. Data Retention

Children's data entered by a portrayer follows the same retention policy as all client data:

• Retained while the portrayer's account is active.
• Deleted 365 days after the parental consent is recorded, when a portrayer deletes the record, and on request. A parent or a portrayer may ask us to remove a child's information at any time by contacting us, and we will complete the removal within 30 days of the request.
• A parent may request immediate deletion at any time (see section 6).

6. Parents' Rights

If you are a parent or guardian and believe a Santa portrayer has stored your child's information in SantaBook without your consent, you have the right to:

• Review what information has been stored about your child.
• Request correction of inaccurate information.
• Request deletion of your child's information entirely.
• Revoke consent for future collection or use.

To exercise any of these rights, contact us at mark@santabook.app. We will respond within 48 hours and work with the portrayer to fulfill your request.

7. Reporting Concerns

If you have concerns about how children's data is handled on SantaBook, contact us directly:

You may also file a complaint with the Federal Trade Commission (FTC) at ftc.gov.

8. Related Policies

This page supplements our Privacy Policy (section 7) and Terms of Service. In the event of any conflict, the Privacy Policy governs.