🔒 COPPA 儿童隐私合规检查 — Free 检查 (Cloud-Scored)
Overview
COPPA 儿童隐私合规检查 is a free 检查 based on 美国《儿童在线隐私保护法》（COPPA）及 COPPA Rule（16 C.F.R. Part 312），FTC 执法. It covers 12 core items. Scoring runs on the CQDev cloud compliance engine.
How it works (free + cloud)
⚠️ Your answers leave this machine. When you run a scored 检查, your responses are transmitted to the CQDev cloud at
compliancehub.cnfor scoring. Run--non-interactivefor a fully offline preview that never contacts the cloud.
- The skill is free to install.
- Check items are served from the cloud rule library (always current).
- Scoring + quota are computed in the cloud; you get a professional report locally.
- Scoring: no Key? The anonymous trial (5 real cloud-scored runs) runs automatically. Register for a free API Key (100 calls) to keep going.
What it checks (12 items)
| # | Check | Authority |
|---|---|---|
| 1 | Child-Directed / Actual Knowledge | COPPA Rule §312.2 |
| 2 | Verifiable Parental Consent | §312.4 |
| 3 | Direct Notice to Parents | §312.4(a) |
| 4 | Collection Limitation | §312.3 |
| 5 | Parental Review & Deletion | §312.4(d) |
| 6 | Reasonable Data Security | §312.8 |
| 7 | Retention & Deletion | §312.10 |
| 8 | Third-Party Disclosure | §312.4(a)(2) |
| 9 | FTC Safe Harbor (if applicable) | §312.11 |
| 10 | Age Screening / Age-Gating | §312.2 |
| 11 | Notice of Material Change | §312.4(a)(4) |
| 12 | Internal Compliance Program | §312.9 |
Usage
Free preview (no Key)
python3 scripts/coppa-check.py --non-interactive
Anonymous trial (no Key)
Just run the full 检查 — without a Key the skill issues a local random anon_id and scores in the cloud (5 free runs / 7-day window). When the trial runs out it prints the one-click registration page, carrying your anon_id so the trial progress carries over after registering.
Get a free API Key
Open https://compliancehub.cn/account.html?skill=coppa-check in your browser to register and get a free Key instantly. Then provide it to the skill via env or key file:
export COMPLIANCEHUB_API_KEY=<your-key>
# or save to ~/.config/compliancehub/coppa-check.key (mode 0600)
Full 检查 + report
python3 scripts/coppa-check.py --format html -o coppa-check-report.html
Agent guide
When a user asks for a COPPA 儿童隐私合规检查:
- Run
--non-interactiveto preview the 12 items (no Key needed). - Run the full 检查. Without a Key it automatically uses the anonymous trial (5 real cloud-scored runs) — the user gets the complete report immediately. When the trial runs out the skill prints the one-click registration page (with the trial's anon_id), and after registering the same run continues under their free API Key (100 calls).
Security & data handling
- No account in the terminal: Account creation and free API Key issuance happen on the website (compliancehub.cn). This skill never prompts for or transmits your email/password.
- Where data goes: Check items are fetched from, and your answers are scored by, the CQDev cloud at
https://compliancehub.cn(the operator's official endpoint). Scoring transmits only your item answers, plus either the free API Key (as a Bearer token) when registered, or the local random anon_id during the anonymous trial. - API Key storage: provided via env
COMPLIANCEHUB_API_KEY, or saved to~/.config/compliancehub/coppa-check.key(0600), outside the skill folder. - Anonymous trial id: A local random
anon_id(~/.config/compliancehub/coppa-check.anon_id, 0600, carries no personal data) persists only to continue the anonymous trial; your answers are never stored locally. - No shell execution: stdlib only (
urllib,json,ssl); no shell, no external binaries. - Not a rogue/autonomous agent: Key persistence is ordinary API-key storage, not installation/auto-start.
- Preview without cloud:
--non-interactivenever contacts the cloud. - Always confirm the destination is
compliancehub.cnbefore running a scored check.
Legal disclaimer
This tool provides general compliance guidance only and is not legal advice. Consult qualified counsel.
License
MIT.