Younger users deserve clear adult approval.

KGE may require parent or guardian approval based on the user's age, product, jurisdiction and product risk. The age threshold is controlled centrally by KGE Identity so a product does not silently change the rule. Adult-only minimum ages cannot be overridden by a parent or guardian.

KGE evaluates age before collecting the remainder of personal account information from a potentially under-13 user. If guardian approval is required, account creation pauses and KGE collects the parent or guardian online contact information needed to request approval.

KGE sends a service email to the parent or guardian address describing the requesting product, the relevant age band, information KGE expects to collect after approval, social or AI features that apply, purchase or Moxbits features where applicable, safety controls, revocation rights and links to the current policies. Production guardian notices are sent through KGE's Microsoft 365 mail system from a dedicated consent mailbox.

The disclosure contains a one-time guardian token. KGE stores only a cryptographic hash of that token, applies an expiration and attempt limit, and does not display the token to the younger user's onboarding session. The parent or guardian enters the token on the KGE guardian page before the approval controls unlock. The guardian token is separate from the consumer's 6-digit Support PIN.

Where COPPA applies, KGE uses a stricter process before collecting, using or disclosing personal information from a child under 13. For internal-use scenarios where the law permits an email-plus method, KGE requires an additional confirmation step before activation. Where the nature of the service or disclosure requires a stronger verifiable-parent method, a simple emailed token does not complete onboarding and the request remains blocked or pending stronger verification.

Social products may involve profiles, connections, messages, posts, groups, media or other information disclosed beyond KGE's internal use. KGE's default guardian policy does not treat a simple email code as sufficient COPPA verification for an under-13 social account. KGE may impose a higher minimum age or require a stronger verified-parent process before those features become available.

KGE records the request identifier, product, age band, guardian email, approval method, policy and disclosure version, required acknowledgements, timestamps, consent status and revocation status. KGE aims to avoid duplicating the child's raw date of birth in the guardian-consent store when the authoritative date of birth is already held by KGE Identity.

Ordinary guardian approval does not enroll a child in targeted advertising. Where a separate parental opt-in is legally required for targeted advertising or another third-party disclosure, KGE must obtain that separate approval before the covered processing begins.

A parent or guardian may contact KGE to withdraw consent, subject to verification and to legal, fraud-prevention, safety and record-retention obligations. Withdrawal can result in feature restrictions, closure of a child account or removal of product access when the service cannot legally operate without that consent.

Guardian tokens expire, are rate limited and are never stored in readable form. KGE may reject requests where the parent email matches the younger user's account email, detect suspicious repeated attempts, require additional verification, preserve relevant audit evidence and suspend an onboarding session where fraud or coercion is suspected.