Children's Privacy Notice

1. Age gate and parental approval

When you sign in to Mission Masters we ask for your birth month and year — we never store your full date of birth. If you may be a child under our local children's privacy threshold, we email a verifiable parental consent ("VPC") request to the parent or guardian email you provide and we block all child personal-data collection until the parent approves.

The approval link expires after 30 days. The child can resend it, change the parent email, or contact us at any time. We never publish a child's contact information.

2. What we collect from a child with parental consent

• Display name and account identifiers
• Game participation results (no public leaderboards for minors)
• Optional profile photo or selfie when explicitly chosen by the player and biometric-consent flow completed
• Optional voice/video interview recording when explicitly chosen by the player
• Device, IP, and security/log information for fraud prevention
• Coarse location at the city level only when a game type explicitly requires it

3. What we do NOT do

• We do not sell a child's personal data.
• We do not show targeted advertising to children.
• We do not build behavioral profiles of children.
• We do not publish a child's contact information.
• We do not collect a parent's date of birth.
• We do not use a child's data to train AI models. AI features for minor accounts default to the most protective setting (no profiling, no personalization signals leaving the player's account).

4. Parent and guardian rights

Parents and legal guardians can, at any time:

• Review the personal information we hold for their child
• Withdraw consent for further collection or use
• Request deletion of their child's account and associated data
• Request a portable export of their child's data (DSAR)
• Refuse to allow further use of selfies, recordings, or other biometrics

Email privacy@missionmasters.io with the subject line "Parental request" or use the "Withdraw approval" option in the player's account settings.

5. EU / EEA / UK (GDPR Article 8) and 2027 US state laws

For users in the EU/EEA we apply GDPR Article 8: a user under the local age of digital consent (16 in most member states; 13–15 in member states that lowered the floor; 13 in the UK) is treated the same as a US under-13 user. VPC is required, biometric features are blocked, and the right to erasure applies.

We are also building toward 2027 US state-law changes, including California's Age Appropriate Design Code Act (default-protective settings for likely minors, no profiling, Data Protection Impact Assessment), Texas App Store Accountability Act (cooperation with app-store age signals), and the under-18 notification window restrictions in California AB 1949.

6. Retention

Age and consent audit records are retained for 6 years to satisfy COPPA / GDPR accountability obligations. Selfies and AI-derived assets are deleted within 24 hours after the event ends or 24 hours after the recap video is ready, whichever is later, capped at 7 days post-event regardless of recap status. A parent can request immediate deletion at any time.

7. Contact

Mission Masters Game Growth
Privacy: privacy@missionmasters.io