Napcat strictly prohibits the collection of personal data from individuals under the age of 13 (or the higher minimum age in jurisdictions like the EU, where thresholds reach 16). Our services are not designed for or targeted at minors, and we employ multi-layered age verification during account creation—including date-of-entry validation, AI-driven pattern analysis, and third-party age estimation tools—to block underage access. If inadvertent data collection occurs (e.g., due to falsified age claims), we immediately purge all records, terminate associated accounts, and conduct forensic audits to identify system gaps.

We adhere to global frameworks including COPPA (U.S.), GDPR-K (EU), and Brazil’s LGPD-Child, requiring verified parental consent for any exceptional child-directed services. Consent is obtained through rigorous methods: notarized forms, video-confirmed identity checks, or transaction-based validation (e.g., $0.50 charity charge to confirm adult oversight). Parents/guardians may submit data access, correction, or deletion requests via privacy@napcat.com, with requests processed within 30 days and accompanied by identity-proof documentation to prevent fraudulent claims.

To further ensure compliance, we maintain auditable records of parental consents for the legally required duration (typically 3–5 years depending on jurisdiction) and implement strict data minimization for verified minor accounts, collecting only information essential for the service. We proactively notify parents upon consent verification, detailing collected data types, third-party sharing (e.g., educational platforms or moderators), and ongoing control options. All partners handling minor data undergo rigorous child-safety vetting and contractual obligations exceeding standard DPAs, including mandatory encryption, annual penetration testing, and immediate breach reporting. For adolescents aged 13–17 in regions permitting limited autonomy, we provide granular privacy settings while retaining parental oversight rights via master guardian accounts.