🔒 COPPA 儿童隐私合规检查 — Free 检查 (Cloud-Scored)

Overview

COPPA 儿童隐私合规检查 is a free 检查 based on 美国《儿童在线隐私保护法》（COPPA）及 COPPA Rule（16 C.F.R. Part 312），FTC 执法. It covers 12 core items. Scoring runs on the CQDev cloud compliance engine.

How it works (free + cloud)

⚠️ Your answers leave this machine. When you run a scored 检查, your responses are transmitted to the CQDev cloud at compliancehub.cn for scoring. Run --non-interactive for a fully offline preview that never contacts the cloud.

• The skill is free to install.
• Check items are served from the cloud rule library (always current).
• Scoring + quota are computed in the cloud; you get a professional report locally.
• Scoring: no Key? The anonymous trial (5 real cloud-scored runs) runs automatically. Register for a free API Key (100 calls) to keep going.

What it checks (12 items)

#	Check	Authority
1	Child-Directed / Actual Knowledge	COPPA Rule §312.2
2	Verifiable Parental Consent	§312.4
3	Direct Notice to Parents	§312.4(a)
4	Collection Limitation	§312.3
5	Parental Review & Deletion	§312.4(d)
6	Reasonable Data Security	§312.8
7	Retention & Deletion	§312.10
8	Third-Party Disclosure	§312.4(a)(2)
9	FTC Safe Harbor (if applicable)	§312.11
10	Age Screening / Age-Gating	§312.2
11	Notice of Material Change	§312.4(a)(4)
12	Internal Compliance Program	§312.9

Usage

Free preview (no Key)

python3 scripts/coppa-check.py --non-interactive

Anonymous trial (no Key)

Just run the full 检查 — without a Key the skill issues a local random anon_id and scores in the cloud (5 free runs / 7-day window). When the trial runs out it prints the one-click registration page, carrying your anon_id so the trial progress carries over after registering.

Get a free API Key

Open https://compliancehub.cn/account.html?skill=coppa-check in your browser to register and get a free Key instantly. Then provide it to the skill via env or key file:

export COMPLIANCEHUB_API_KEY=<your-key>
# or save to ~/.config/compliancehub/coppa-check.key (mode 0600)

Full 检查 + report

python3 scripts/coppa-check.py --format html -o coppa-check-report.html

Agent guide

When a user asks for a COPPA 儿童隐私合规检查:

1. Run --non-interactive to preview the 12 items (no Key needed).
2. Run the full 检查. Without a Key it automatically uses the anonymous trial (5 real cloud-scored runs) — the user gets the complete report immediately. When the trial runs out the skill prints the one-click registration page (with the trial's anon_id), and after registering the same run continues under their free API Key (100 calls).

Security & data handling

• No account in the terminal: Account creation and free API Key issuance happen on the website (compliancehub.cn). This skill never prompts for or transmits your email/password.
• Where data goes: Check items are fetched from, and your answers are scored by, the CQDev cloud at https://compliancehub.cn (the operator's official endpoint). Scoring transmits only your item answers, plus either the free API Key (as a Bearer token) when registered, or the local random anon_id during the anonymous trial.
• API Key storage: provided via env COMPLIANCEHUB_API_KEY, or saved to ~/.config/compliancehub/coppa-check.key (0600), outside the skill folder.
• Anonymous trial id: A local random anon_id (~/.config/compliancehub/coppa-check.anon_id, 0600, carries no personal data) persists only to continue the anonymous trial; your answers are never stored locally.
• No shell execution: stdlib only (urllib, json, ssl); no shell, no external binaries.
• Not a rogue/autonomous agent: Key persistence is ordinary API-key storage, not installation/auto-start.
• Preview without cloud: --non-interactive never contacts the cloud.
• Always confirm the destination is compliancehub.cn before running a scored check.

Legal disclaimer

This tool provides general compliance guidance only and is not legal advice. Consult qualified counsel.

License

MIT.