Young people should be seen for their work—not exposed for it.
No independent minor accounts. No exact identities, home addresses, school names, direct messaging, home delivery, behavioral advertising, or child-level sponsor analytics.
Data minimization
Public pages omit full child names, school, exact age, address, contact details, and buyer identity.
Structured interaction
No free-form adult-to-child messages, home delivery, private meetings, or unsupervised fulfillment.
Sponsor boundary
Sponsor views suppress groups under five and never expose child-level records or raw responses.
Each role sees only what it needs to complete its job.
Visibility is enforced by server-side role, organization, campaign assignment, and ownership checks—not by hidden navigation alone.
Aggregate campaign progress and parent-approved venture information only.
Eligible products, event details, order status, and structured fulfillment instructions.
Aggregate investment and outcome metrics with small-group suppression.
Assigned campaign operations and necessary parent contact for supervised delivery.
Safety policy must become an operating practice.
Technology supports the controls, but it does not replace qualified review, staff training, insurance, emergency planning, or local legal judgment.
- Qualified child-safety, privacy, and legal review
- Current jurisdiction-specific product and venue requirements
- Host, sponsor, parent, buyer, and vendor agreements
- Staff screening, training, escalation, and incident procedures
- Insurance, tax, accounting, refund, and payout review
- Retention, deletion, breach response, and access-review procedures