The second, “KleptoCats,” operated by HyperBeard, Inc., is a children’s game in which the user controls a virtual pet cat. Although the app’s privacy statement excludes children under 13, CARU questioned whether the app nonetheless attracts a substantial number of children under 13, and thus is subject to COPPA regulations. CARU investigated whether KleptoCats collects personally identifiable information from users under 13, without first obtaining parental consent. CARU attempted to engage HyperBeard in its investigation, but the game operator failed to respond. Accordingly, CARU referred the case to the FTC for a full federal investigation.
Putting it Into Practice: These cases are a reminder that companies receiving a CARU inquiry should take the matter seriously. CARU regularly refers to the FTC those who refuse to cooperate, and the FTC reviews such cases with priority.