There is a corner of digital advertising where none of your normal tools are legal. No cookies. No mobile ad IDs. No fingerprints. No lookalikes. No retargeting.
That corner has a name: kidtech. And as PPC Land lays out in a detailed explainer, it has quietly become one of the most consequential parallel infrastructures in the ad industry.
What kidtech actually is
Kidtech is the stack of ad serving, consent capture, contextual classification and creative review that lets brands reach audiences below the age of digital consent without collecting persistent identifiers or building behavioural profiles.
It exists because of a legal asymmetry, not a technical one. The US Children’s Online Privacy Protection Act (COPPA) was enacted in 1998, and the FTC’s rule took effect on 21 April 2000. The turning point came with the amended rule published on 17 January 2013, effective that July: persistent identifiers were reclassified as personal information in their own right.
That single change deleted cookies, mobile advertising IDs and device fingerprints from the toolkit for an entire audience. Everything sold to under-13s had to be rebuilt from scratch.
How the plumbing works
In real-time bidding, the relevant field is coppa, a flag inside the Regs object of the OpenRTB bid request. It entered the spec with release candidate 1 of version 2.2 on 25 October 2013, and OpenRTB 2.2 was finalised in April 2014.
Crucially, the flag is a declaration, not a detection. Nothing verifies it.
Once regs.coppa equals 1, guidance from fraud detection firm Pixalate says the exchange should strip a lot out. Per that guidance:
- Suppress hashed device identifiers didmd5 and didsha1
- Truncate the IP field by its lowest 8 bits, and IPv6 by its lowest 32
- Suppress latitude and longitude
- Drop metro, city and zip
- Remove the user object’s id, buyeruid, yob and gender
What actually reaches the bidder is roughly an app bundle, a content category, a format and coarse location. That’s it.
On the publisher side, Google’s long-standing TFCD and TFUA parameters were replaced on 18 May 2026 by a single TFAT parameter that finally adds a distinct teen tier. On YouTube, the equivalent lever is the uploader-applied “made for kids” designation, which switches off personalised advertising on the video.
What breaks for performance marketers
Strip the identifier and you strip the join key between exposure and outcome. Attribution collapses to aggregate. Frequency capping, sequencing and retargeting either vanish or degrade to session-level approximations. Targeting moves entirely to what is on the screen rather than who is watching.
The measurement penalty is real. A Coalition for Innovative Media Measurement study cited by PPC Land found that poor children’s audience data wastes $590,000 of every $1 million spent, with presence-of-children data correct only 42% of the time. YouTube supplies demographic reporting only for users aged 13 and up.
Why the money is moving now
The amended COPPA rule that took effect on 23 June 2025 added a separate consent requirement for disclosing children’s data to third parties, aimed directly at the seamless data passing ordinary programmatic depends on. Full compliance was required by 22 April 2026.
Roblox shows the scale. Through 31 January 2026, 45% of its 144 million daily active users had completed age verification; of those, 35% were under 13. That tier had been withheld from advertisers entirely, until 4 June 2026, when Roblox named SuperAwesome its sole third-party partner for contextual advertising to under-13s worldwide. There is no programmatic route in: deals with Magnite, PubMatic and Google stay restricted to 13-plus.
SuperAwesome, founded in 2013 by Dylan Collins, is generally credited with naming the category. Collins told PocketGamer.biz in April 2018 that the firm had “essentially invented the kidtech category”. Epic Games acquired it in 2020; management bought most of it back in a deal that closed on 17 January 2024, with Epic keeping Kids Web Services.
The takeaway for growth teams
Enforcement is escalating faster than the tooling. Disney settled for $10 million in September 2025 over unlabelled child-directed videos. The DOJ disclosed a $400 million TikTok settlement on 21 August 2026. In Europe, Article 28(2) of the Digital Services Act bans profiling-based ads where a provider knows with reasonable certainty the recipient is a minor.
Three practical moves:
1. Audit your inventory. If any of your app or video buys touch child-directed content, assume the identifiers you are paying for are either stripped or wrongly declared.
2. Rebuild measurement expectations. Aggregate lift and brand studies, not last-click. Budget for it before the campaign, not after.
3. Treat compliance as a moat question. Exclusivity deals like the Roblox arrangement concentrate access with single vendors. If youth audiences matter to your brand, plan for gatekeepers, not open marketplaces.
Kidtech is a preview. The identifier-free, context-first, consent-gated model being forced on children’s advertising is the same model creeping toward everyone else.
Source: PPC Land
