When you select 'I Agree to these terms and am under 13 years of age' while registering and you get the reply from gentoo which tells to reply the form included in the e-mail, but then there is missing where to send it. <snip> Welcome to Gentoo Forums Forums In compliance with the COPPA act your account is currently inactive. Please print this message out and have your parent or guardian sign and date it. Then fax it to: OR mail it to: </snip> <snip> I HAVE REVIEWED THE INFORMATION PROVIDED BY MY CHILD AND HEREBY GRANT PERMISSION TO Gentoo Forums TO STORE THIS INFORMATION. I UNDERSTAND THIS INFORMATION CAN BE CHANGED AT ANY TIME BY ENTERING A PASSWORD. I UNDERSTAND THAT I MAY REQUEST FOR THIS INFORMATION TO BE REMOVED FROM Gentoo Forums AT ANY TIME. Parent or Guardian (print your name here): _____________________ (sign here): __________________ Date: _______________ ------------------------------ CUT HERE ------------------------------ Once the administrator has received the above form via fax or regular mail your account will be activated. Please do not forget your password as it has been encrypted in our database and we cannot retrieve it for you. However, should you forget your password you can request a new one which will be activated in the same way as this account. Thank you for registering. -- Thanks, - Kyle Manna <nitro [at] gentoo [dot] org> Gentoo Linux: http://www.gentoo.org Gentoo Forums Administrator: http://forums.gentoo.org </snip> Reproducible: Always Steps to Reproduce: 1. Go to http://forums.gentoo.org/profile.php?mode=register&sid=654fc8fb62aea51bd41bed2a78bc259b 2. Select: I Agree to these terms and am under 13 years of age 3. Wait for e-mail Actual Results: See details Expected Results: That the mail had contained the reply address/fax-number I did select 'I Agree to these terms and am under 13 years of age ' by misstake, otherwise I never would have found this bug.
No activity on this bug for over a year. Kyle, can you check what needs to be done?
What is a COPPA? It seems to be something that is provided by phpbb automatically and only applies to US citizens in the first place. Thus far there is no fax number for the foundation. There is probably an address but I don't know it. In any case as far as Dutch/European law is concerned an email is -- in principle -- as valid as a fax or a letter. However one might want to require signed emails from used keys as without signing there is no easy way to get any kind of non-tampering proof.
COPPA: http://www.cdt.org/legislation/105th/privacy/coppa.html AFAIK the forums have to adhere to US law because the box that hosts it is in the US, which means is applicable to everyone not just Us citizens, but IANAL so I'm not sure. I guess it comes down to wether email is as verifiable as fax/mail for parental consent.
Seems rather useless to me, since all anyone has to do is not click the appropriate age when registering, or say "Ooops, I'm really an AARP member. No idea how I clicked the wrong age option." coppa.org: Internal Uses Operators may use email to get parental consent for all internal uses of personal information, such as marketing back to a child based on his or her preferences or communicating promotional updates about site content, as long as they take additional steps to increase the likelihood that the parent has, in fact, provided the consent. For example, operators might seek confirmation from a parent in a delayed confirmatory email, or confirm the parent's consent by letter or phone call.
What about just remove the option?
(In reply to comment #5) > What about just remove the option? It's a legal requirement so we can't do that.
I guess after the GLEP thingy is done we'll be able to find a possible address.
Is this old, old bug still relevant?
This bug is still relevant (tested it a few minutes ago), the mail sent out still misses fax or postal address to return the form to. I still don't understand why the option is there, it's a forum and as far as I can tell the Gentoo forum isn't promoting a commercial products or other type of commerce, so to remove the option wouldn't be against COPPA.
Forums is now hosted outside the US. You can remove the COPPA option now.
Reassigned to trustees to get a legal opinion on this.
forum-mods: Per trustees decision, please remove your COPPA, and close this bug.
The COPPA isn't configurable in the version of phpBB we are running so it will either need patching or will have to wait until we upgrade to phpBB3 before we can disable it.
How does the phpBB3 upgrade plan look like? Is there an estimation when it would be done?
