Is Your Child's Data Safe? Understanding Kids Data Privacy Risks in Mobile Games

Kids' data privacy is at risk, and mobile games are quietly collecting more personal information than many parents realize. A recent CBC Marketplace investigation uncovered that popular games designed for children are tracking their locations, device information, and in-game behaviors—often without clear consent. This data is then shared with advertisers and third parties, raising serious concerns about safety and online privacy.

With mobile games becoming a daily part of children’s lives, it’s more important than ever to understand the risks and take steps to protect their online privacy. Here’s what you need to know—and how you can keep your child’s information safe.

How Mobile Games Are Collecting Children's Data

As a parent, you do everything you can to protect your child in the real world, but what about their digital world? Many mobile games marketed to children are secretly gathering children's data.

Here’s how they collect kids’ data:

Location Tracking

Many apps access a child’s real-time location, which can be used to serve targeted ads or, in some cases, shared with third parties. This tracking happens even when a game doesn’t require location services to function. This tracking is part of a broader trend of monitoring children's online activities to serve targeted ads.

Device Identifiers

Each device has a unique identifier that allows advertisers to track a child’s activity across different apps and websites. This enables companies to build user profiles without children or parents being aware, leading to personalized ads and potential data-sharing with unknown entities. This practice raises significant concerns about children's online privacy and the potential misuse of their data.

Behavioral Data

Games monitor how often kids play, what they click on, and how they interact with ads. This information helps developers optimize engagement and revenue, often encouraging children to spend more time in the app through personalized recommendations and rewards.

The problem? Many of these apps fail to obtain proper parental consent, violating privacy laws like the Children’s Online Privacy Protection Act (COPPA) in the U.S. Some get around regulations by mislabeling games as "general audience" or hiding tracking permissions in long, complex terms of service.

The Hidden Loopholes in Privacy Laws

Even with laws like COPPA (Children’s Online Privacy Protection Act) designed to protect kids’ data privacy, many mobile games find ways to bypass regulations.

Here’s how they do it:

• Burying Consent in Legal Jargon – Privacy policies and terms of service are often long and complicated, making it difficult for parents to spot data collection practices.
• Labeling Games as “General Audience” – Apps avoid child privacy laws by claiming their content is suitable for all ages, even when their primary users are kids.
• Weak Age Verification (“Age Gates”) – Many games rely on self-reported ages without requiring proof, allowing kids to bypass restrictions with a simple click.

Since most parents don’t have time to read every privacy policy, these loopholes make it easy for companies to collect, store, and share children’s data without clear disclosure. These loopholes undermine the effectiveness of children's online privacy protection.

Why This Data Collection Is Dangerous

Since children spend hours online, advertisers use actual knowledge of their habits to encourage more engagement, posing significant risks to children's privacy. The gaming industry relies on these tactics to boost revenue, often exposing young users to inappropriate content or excessive spending.

Risk of Data Breaches and Identity Theft

Without strong privacy protections, children’s personal information online, including phone numbers, device IDs, and location data, can be compromised. If a game’s database is hacked, this data may be used for identity theft or sold to third parties. Small businesses and large corporations alike must follow reasonable procedures to prevent such breaches, but enforcement remains weak.

Long-Term Tracking and Profiling

Many apps share data with other websites and advertisers, creating long-term digital profiles of children. Since COPPA applies to online services targeting kids under 13, operators should provide notice and allow parents to opt out of tracking. However, reasonable efforts to ensure compliance are often lacking, allowing companies to continue collecting such information unchecked.

Lack of Enforcement and COPPA Violations

The Federal Trade Commission (FTC) is responsible for enforcing COPPA regulations, but FTC regulation and enforcement actions have been inconsistent. The Entertainment Software Rating Board (ESRB) and other industry groups operate under seven safe harbor programs, but violations persist. Some companies claim safe harbor status while ignoring key privacy protection act COPPA guidelines, leading to civil penalties when caught. Many companies have been penalized for collecting personal information from children without obtaining the necessary parental consent.

How to Protect Your Child’s Data Privacy

1. Check Privacy Settings

Many commercial websites and apps enable online collection of personal information by default. Adjust these settings to limit exposure.

• Disable location tracking for apps that don’t need it.
• Turn off ad personalization to reduce targeted advertising exposure.
• Ensure any app that collects data has verifiable parental consent as required under FTC regulation.

2. Research Before Downloading

Not all apps follow data privacy regulations, and some may lack reasonable efforts to secure data.

• Choose games certified by the Entertainment Software Rating Board (ESRB) or other safe harbor programs to ensure compliance.
• Read privacy policies and operator's practices to understand how data is used.
• Check trusted sources like Common Sense Media for privacy ratings.

3. Use Parental Control Features

Most devices provide tools to help parents manage children’s online activities and protecting children online.

• Enable strong passwords and security features to restrict unauthorized access.
• Use built-in controls to prevent online advertising from tracking behavior.
• Opt for children's apps that don’t require excessive personal information online.

4. Talk to Your Kids About Online Privacy

Kids start using the internet at a young age, so it’s crucial to teach them about potential risks and safe practices.

• Instruct them to obtain parental consent before downloading any app.
• Explain the importance of user privacy and what data they should never share.
• Encourage them to ask for help if they see anything suspicious on social media platforms or gaming apps.

The Bottom Line

While laws like COPPA Rule and FTC regulation help regulate data collection, enforcement is inconsistent, and FTC staff cannot monitor every violation. Parents must take reasonable efforts to stay informed and advocate for stronger protections in the evolving online landscape.

By being proactive, you can help ensure that your child’s personal information online stays secure—and that their data is information deleted when no longer necessary.