Protect the minors who use your app

An app used by children carries a distinct risk. Skanopy shows what yours actually sends to third parties, to make that risk objective, with evidence.

A child using a smartphone in low light.

The risk has changed.

Protecting minors is no longer an abstract principle, it is a precise and current constraint. In France, the digital age of consent is 15: below it, consent to data processing must be obtained jointly with a parent. France’s data protection authority, the CNIL, has issued eight recommendations on minors’ rights and made mobile apps an enforcement priority.

Across the EU, the Digital Services Act (DSA) bans advertising based on profiling once a service knows, with reasonable certainty, that the user is a minor, and parental consent cannot lift that ban. The fines are not theoretical: 345 million euros for TikTok, 405 million for Instagram, over the processing of minors’ data.

Two very concrete risks follow: deplatforming, because app stores enforce strict rules for young audiences, and lasting public backlash, because a failure involving children is not forgiven. This is a moving topic, one we follow closely and keep enriching our analyses around.

What Skanopy reveals.

Every point is a finding from the report: captured on a real phone, dated and verifiable.

See what the app really sends

The identifiers and data leaving towards advertising or profiling third parties, captured on a real phone.

The risk comes from third parties

Embedded SDKs often collect without the publisher seeing it. Skanopy names the actor behind each flow.

Consent, at the right moment

What the app sends before the banner or an age gate, and what it keeps sending after a refusal.

Make the risk objective, without code

A factual, dated finding to decide before an inspection or a store takedown, without touching your code.

How Skanopy works.

  1. Point us to the app

    Two ways in:

    • A Google Play Store link
    • A .apk file, for a pre-release before it ships
  2. Skanopy analyzes it

    On real phones, a real journey replayed automatically:

    • Tracking refused
    • Signed in
    • Article opened
    • Form submitted

    Every third-party actor that fires is mapped.

  3. You receive your report

    Every fact, named:

    • Active third-party actors
    • Identifiers shared
    • Permissions requested
    • Storage access
    • Consent-banner compliance

Your questions, our answers.

  • In France, the digital age of consent is 15. Below it, consent-based processing must be obtained jointly with the holder of parental responsibility.

  • Yes. The DSA bans advertising based on profiling when a service knows, with reasonable certainty, that the user is a minor. Parental consent does not lift that ban.

  • Skanopy runs the app on a real phone and observes what it sends to third parties, and when relative to consent and any age gate. It is a factual finding, not a compliance verdict.

  • No. We document facts, dated and reproducible; the legal assessment stays yours or your counsel’s. Minor protection evolves fast: we follow it closely and keep enriching our analyses.

  • No. A Google Play link, or an .apk file if the app is not published, is enough.

  • Skanopy analyzes Android apps, and your analyses stay in Europe.

At what age is a parent’s consent required?

In France, the digital age of consent is 15. Below it, consent-based processing must be obtained jointly with the holder of parental responsibility.

Photo credit: Abdelghaffar