--- title: Pixalate’s Q1 2025 State Of Children’s Privacy On Mobile Apps Report description: Pixalate’s Q1 2025 State Of Children’s Privacy On Mobile Apps Report Discovers 286 US-Based Mobile Apps in the Google & Apple App Stores Violating COPPA image: https://www.pixalate.com/hubfs/State%20of%20Childrens%20Privacy%20on%20Mobile%20Apps%20-%20Q1%202025.png --- [![pixalate-full-logo](https://www.pixalate.com/hs-fs/hubfs/Pixalate_Logos/pixalate-full-logo.jpg?width=150&height=60&name=pixalate-full-logo.jpg "pixalate-full-logo")](https://www.pixalate.com) Search **Menu** ** ** ![](https://www.pixalate.com/hubfs/Blog_Media/Blog%20photos/pixalate-blog-bg.png) [Mobile Apps](https://www.pixalate.com/blog/topic/mobile-apps) | [Privacy](https://www.pixalate.com/blog/topic/privacy) | [coppa](https://www.pixalate.com/blog/topic/coppa) | 4 min read # Pixalate Discovers 286 US-Based Mobile Apps in the Google & Apple App Stores Violating the Children’s Online Privacy Protection Act (COPPA), Endangering the Privacy of Up to 18 Million Children Written by [Pixalate](https://www.pixalate.com/blog/author/pixalate) May 19, 2025 1:00:00 PM *Pixalate releases complete list of 286 U.S.-registered and advertising enabled apps that likely violate COPPA; research reveals 72% of the identified apps share U.S. consumers’ location data with advertisers* LONDON, May 19, 2025 – [Pixalate](https://www.pixalate.com/), the global market-leading ad fraud protection, privacy, and compliance analytics platform, today released the [Q1 2025 State Of Children’s Privacy On Mobile Apps Report](https://www.pixalate.com/coppa-state-of-childrens-privacy-on-mobile-apps-usa), part of its COPPA Violation Risks in Mobile Apps series. The report highlights app developers on the Google Play Store and Apple App Store that are at risk of violating the Children’s Online Privacy Protection Act (COPPA) for gathering children’s personal information through likely child-directed apps without a compliant privacy policy,* as assessed by Pixalate. According to Pixalate’s analysis, 100% of these likely child-directed and advertising enabled** apps shared US consumers’ personal information with advertisers via the advertising bid stream. ## **Children’s Online Privacy Protection Act (COPPA) Background** COPPA requires operators of apps (in this case, app developers) that collect, use, or disclose personal information from children to post an online privacy policy. To be COPPA compliant, the privacy policy must disclose ([*16 C.F.R. § 312.4 (d) (1-3)*](https://www.ecfr.gov/current/title-16/part-312#p-312.4(d)(1)): - The name, address, telephone number, and email address of all operators collecting or maintaining personal information through the app; - A description of what information the operator collects from children, including whether the operator enables children to make their personal information publicly available, how the operator uses such information, and the operator’s disclosure practices for such information;  - The procedures by which a parent can review or have deleted the child’s personal information and refuse to permit its further collection or use. For [Pixalate's compliance technology](https://www.pixalate.com/knowledgebase/coppa-compliance-tools) to classify a likely child-directed app as potentially non-compliant with the COPPA Rule, one or more of the following deficiencies must be identified: - No privacy policy URL was detected in the app stores. - A URL claiming to link to a privacy policy was detected in the app stores, but neither the page it led to nor any linked pages (in headers / footers) were identified as privacy policies by Pixalate’s compliance technology.  - A privacy policy URL was detected, but it likely did not meet the disclosure obligations of the COPPA Rule, according to Pixalate’s analysis. ## **Key State Of Children’s Privacy On Mobile Apps Report Findings** - **Compliance Issues: 17% (286) **of the identified advertising enabled and likely child-directed mobile apps were likely non-compliant with COPPA -  17 mobile apps did not have a detectable privacy policy - **Missing Disclosures: 79% (225) **of the identified mobile apps with ads lacked a Children's Privacy disclosure – a requirement under the COPPA Rule - **Sensitive Data Concerns: 53% (153)** of the mobile apps with ads that were likely non-compliant under COPPA requested sensitive data permissions, such as location, camera access, audio, etc. - **Data Sharing Risks: 72% (207)** of the identified likely non-compliant ad-enabled mobile apps in the Google Play and Apple App Stores shared US consumers' location data with advertisers in the ad bid stream ## **Top 5 US-Registered Likely Non-Compliant Mobile Apps under COPPA - Apple App Store** | Rank | App | Developer | Developer Country | # Estimated US Consumers | | --- | --- | --- | --- | --- | | **1** | [7 Little Words](https://apps.apple.com/app/id431434152) | Blue Ox Family Games, Inc. | UNITED STATES | 223K | | **2** | [Magic Jigsaw Puzzles－Games HD](https://apps.apple.com/app/id439873467) | XIMAD, Inc. | UNITED STATES | 217K | | **3** | [Word Maker - Puzzle Game](https://apps.apple.com/app/id1598506904) | NewPubCo, Inc | UNITED STATES | 122K | | **4** | [Just Blocks: Wood Block Puzzle](https://apps.apple.com/app/id1507198509) | NewPubCo, Inc | UNITED STATES | 44K | | **5** | [Art of Puzzles - Jigsaw Games](https://apps.apple.com/app/id6463419262) | XIMAD, Inc. | UNITED STATES | 22K |   ## **Top 5 US-Registered Likely Non-Compliant Mobile Apps under COPPA - Google Play Store** | Rank | App | Developer | Developer Country | # Estimated US Consumers | | --- | --- | --- | --- | --- | | **1** | [Magic Jigsaw Puzzles－Games HD](https://play.google.com/store/apps/details?id=com.bandagames.mpuzzle.gp) | ZiMAD | UNITED STATES | 237K | | **2** | [7 Little Words](https://play.google.com/store/apps/details?id=com.blueoxtech.sevenlittlewords) | Blue Ox Family Games, Inc. | UNITED STATES | 139K | | **3** | [Art of Puzzles－Jigsaw Pictures](https://play.google.com/store/apps/details?id=com.zimad.art.puzzles) | ZiMAD | UNITED STATES | 85K | | **4** | [KidsFlix for TV](https://play.google.com/store/apps/details?id=com.viva.kidsflix.tv) | Gary L Peskin | UNITED STATES | 47K | | **5** | [Magic Diamond Painting－Gem Art](https://play.google.com/store/apps/details?id=com.zimad.magicpaintings) | ZiMAD | UNITED STATES | 29K |   For this report, Pixalate’s legal and data science teams analyzed the privacy policies of over 24K likely child-directed apps enabled for programmatic advertising (e.g., has ad impressions targeted towards US Consumers). These apps were available for download from the Google Play Store and Apple App Store in Q1 2025. For the complete list and the methodology, download the report [**here**](https://pixal.at/4kqzYT6). [![Access the Report + List](https://no-cache.hubspot.com/cta/default/2364596/d63579a9-9467-420f-b8a7-87d8734b969a.png)](https://cta-redirect.hubspot.com/cta/redirect/2364596/d63579a9-9467-420f-b8a7-87d8734b969a) **References to ‘without a privacy policy/policies’ or ‘no detected/detectable privacy policy/policies’ imply that Pixalate’s proprietary systems were unable to detect or identify a purported privacy policy/notice URL at the time of crawling the App Stores pursuant to Pixalate’s proprietary privacy policy detection and classification system. **Based on Pixalate’s methodology and analysis, all of the identified apps generally exhibit characteristics aligned with the child-directed factors under the COPPA Rule, suggesting that these apps likely appeal to, or may predominantly be used by, children.* ***References to advertising-enabled mobile apps, or apps with ads are those that have open programmatic advertising traffic, with ad impressions targeted towards United States based consumers at the time of crawling.* *To learn more, please review the report’s methodology*. **About Pixalate** Pixalate is a global platform specializing in privacy compliance, ad fraud prevention, and digital ad supply chain data intelligence. Founded in 2012, Pixalate is trusted by regulators, data researchers, advertisers, publishers, ad tech platforms, and financial analysts across the Connected TV (CTV), mobile app, and website ecosystems. Pixalate is accredited by the MRC for the detection and filtration of Sophisticated Invalid Traffic (SIVT).  [pixalate.com](https://www.pixalate.com/) **Disclaimer** *The content of this press release, and the Q1 2025 State of Children’s Privacy on Mobile Apps Report (the ‘report’) - including all content set forth herein, reflect Pixalate’s opinions with respect to the factors that Pixalate believes can be useful to the digital media industry, inclusive of advertisers, advertising technology companies, developers of mobile applications, professional advisors, non-governmental entities, and regulators.  Pixalate is sharing this report’s data–and opinions relating thereto–not to impugn the standing or reputation of any entity, person, or app, but, instead, to report opinions and suggest trends pertaining certain apps available for download via the Apple App Store & Google Play Store during the time period studied. Any data shared is grounded in Pixalate’s proprietary technology and analytics, which Pixalate is continuously evaluating and updating. Any references to outside sources should not be construed as endorsements. Pixalate’s opinions are just that, opinions, which means that they are neither facts nor guarantees.* *It is important to note that the mere fact that an app appears to be directed to children or is deemed likely child-directed (e.g., data subjects under 13 years of age, as defined by COPPA), does not mean that any such app, or its operator, is failing to comply with COPPA. Further, with respect to apps that appear to be directed to children and have characteristics that, in Pixalate’s opinion, may trigger related privacy obligations and/or risk, such assertions reflect Pixalate’s opinions (i.e., they are neither facts nor guarantees); and, although Pixalate’s methodologies used to render such opinions are derived from automated processing, which at times is coupled with human intervention, no assurances can be – or are – given by Pixalate with respect to the accuracy of any such opinions.* ### Search Blog Search ### Follow Pixalate ### Subscribe to our blog *By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use ](https://www.pixalate.com/terms)and [Privacy Policy.](https://www.pixalate.com/privacypolicy) Previous Story [← Pixalate and Pangle – Ad Network of TikTok for Business Announce Global Partnership to Strengthen Ad Fraud Prevention and Brand Safety Protection](https://www.pixalate.com/blog/pixalate-and-pangle-announce-global-partnership) [** ](https://www.pixalate.com/blog) Next Story [Pixalate Releases Q1 2025 North America SSP Market Share Rankings for CTV, Mobile Apps, & Web: Verve No. 1 for Apple App Store Apps in the US (35%), Index Exchange No. 1 on Web in the US (11%) →](https://www.pixalate.com/blog/q1-2025-ssp-market-share-report-north-america) ## You May Also Like These Stories on Mobile Apps [![](https://www.pixalate.com/hubfs/Abandoned%20Mobile%20Apps%20Report%20-%20blog%20cover.png) ](https://www.pixalate.com/blog/pixalate-releases-may-2026-global-abandoned-mobile-apps-report) [Mobile Apps](https://www.pixalate.com/blog/topic/mobile-apps) ### [Pixalate Releases May 2026 Global Abandoned Mobile Apps Report: “Draw In™” at the top on Apple App Store, “GUNSHIP BATTLE: Helicopter 3D” tops Google Play Store](https://www.pixalate.com/blog/pixalate-releases-may-2026-global-abandoned-mobile-apps-report) Jun 24, 2026 9:00:02 AM | 3 min read [![](https://www.pixalate.com/hubfs/Blog%20Media/2026%20Covers%20and%20Images/MONTHLY%20MOST%20COMMON%20MOBILE%20AD%20FRAUD%20TYPES%20GOOGLE%20-%20APPLE%20BLOG%20COVER.png) ](https://www.pixalate.com/blog/pixalates-may-2026-most-common-mobile-app-ad-fraud-types) [Ad Fraud](https://www.pixalate.com/blog/topic/ad-fraud) ### [Pixalate Releases May 2026 Most Common Mobile App Ad Fraud Types: ‘High Risk Device ID’ Most Common Type Across Google Play Store (32%); ‘High Risk IP’ Most Common on Apple App Store (48%)](https://www.pixalate.com/blog/pixalates-may-2026-most-common-mobile-app-ad-fraud-types) Jun 9, 2026 9:00:00 AM | 2 min read [![](https://www.pixalate.com/hubfs/Blog%20Media/2026%20Covers%20and%20Images/MONTHLY%20TOP%20MOBILE%20AD%20FRAUD%20TYPES%20GOOGLE%20-%20APPLE%20BLOG%20COVER.jpg) ](https://www.pixalate.com/blog/pixalates-april-2026-most-common-mobile-app-ad-fraud-types) [Ad Fraud](https://www.pixalate.com/blog/topic/ad-fraud) ### [Pixalate Releases April 2026 Most Common Mobile App Ad Fraud Types: ‘High Risk Device ID’ Most Common Type Across Google Play Store (28%); ‘High Risk IP’ Most Common on Apple App Store (23%)](https://www.pixalate.com/blog/pixalates-april-2026-most-common-mobile-app-ad-fraud-types) May 18, 2026 9:00:00 AM | 2 min read ** ### Subscribe to our blog *By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use ](https://www.pixalate.com/terms)and [Privacy Policy.](https://www.pixalate.com/privacypolicy) ![pixalate-logo-red-small](https://www.pixalate.com/hs-fs/hubfs/2018NewTemplate/pixalate-logo-red-small.png?width=208&name=pixalate-logo-red-small.png "pixalate-logo-red-small") ** By entering your email address and clicking Subscribe, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy) Products [Analytics](https://www.pixalate.com/products/analytics) [Blocking](https://www.pixalate.com/products/blocking) [Media Rating Terminal](https://www.pixalate.com/products/mrt) [Publisher Trust Indexes](https://www.pixalate.com/rankings/?group=app&reportId=publisherTrustIndex) [Seller Trust Indexes](https://www.pixalate.com/rankings/?group=app&reportId=publisherTrustIndex) [IoT Device Rankings](https://www.pixalate.com/rankings/?group=app&reportId=iotDeviceReach) Resources [Blog](https://blog.pixalate.com/) [Press](https://www.pixalate.com/press) [Careers](https://www.pixalate.com/jobs) [Team](https://info.pixalate.com/pixalate-leadership-team) Contact Email [** sales@pixalate.com ](mailto:sales@pixalate.com) [** privacy@pixalate.com ](mailto:privacy@pixalate.com) US: [** +1 888 749 2528 ](tel:+1%20888%20749%202528) EU: [** +44 (0)800 011 2050 ](tel:+44%20(0)800%20011%202050) Slack: [Join ATSAPI Slack Channel ](https://atsapi-pixalate.slack.com/join/shared_invite/zt-10dtow5cj-OEtlNr5yzJkrZMQUqcEEow#/shared-invite/email) Offices Global Offices US 1775 Greensboro Station Place, Suite 425, McLean, VA 22102 UK 20 North Audley Street London, W1K 6WE, United Kingdom EU 10 Earlsfort Terrace Dublin 2, D02 T380, Ireland Singapore 10 Anson Road, #22-02 International Plaza, Singapore 079903 [![facebook](https://www.pixalate.com/hubfs/footer/icons/facebook.png) ](https://www.facebook.com/pixalate) [![x](https://www.pixalate.com/hubfs/footer/icons/twitter-x.png) ](https://twitter.com/pixalateinc) [![linkedin](https://www.pixalate.com/hubfs/footer/icons/linkedin.png) ](https://www.linkedin.com/company/pixalate) ![wechat](https://www.pixalate.com/hubfs/footer/icons/wechat.png) [![slack](https://www.pixalate.com/hubfs/footer/icons/slack.png) ](https://atsapi-pixalate.slack.com/join/shared_invite/zt-10dtow5cj-OEtlNr5yzJkrZMQUqcEEow#/shared-invite/email) [Terms of Use](https://www.pixalate.com/terms) [Privacy Policy](https://www.pixalate.com/privacypolicy) [GDPR Compliance](https://www.pixalate.com/gdpr) Disclaimer Copyright © 2025 Pixalate [Back to top **](https://www.pixalate.com/blog/pixalates-q1-2025-state-of-childrens-privacy-on-mobile-apps-report#) # Disclaimer Disclaimer: The content of this page reflects Pixalate’s opinions with respect to the factors that Pixalate believes can be useful to the digital media industry. Any proprietary data shared is grounded in Pixalate’s proprietary technology and analytics, which Pixalate is continuously evaluating and updating. Any references to outside sources should not be construed as endorsements. Pixalate’s opinions are just that - opinion, not facts or guarantees. Per the MRC, “'Fraud' is not intended to represent fraud as defined in various laws, statutes and ordinances or as conventionally used in U.S. Court or other legal proceedings, but rather a custom definition strictly for advertising measurement purposes. Also per the MRC, “‘Invalid Traffic’ is defined generally as traffic that does not meet certain ad serving quality or completeness criteria, or otherwise does not represent legitimate ad traffic that should be included in measurement counts. Among the reasons why ad traffic may be deemed invalid is it is a result of non-human traffic (spiders, bots, etc.), or activity designed to produce fraudulent traffic.” ** ** *By clicking Download and entering your email address, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and have read and acknowledge our [Privacy Policy](https://www.pixalate.com/hubfs/2024-08-20_Pixalate_Privacy_Policy.pdf). *Copyright © 2025 Pixalate** * * * * * * * * * * * * * * * * * * * * * * * * * * * * × ## Subscribe to the Pixalate Blog The first step in ad fraud prevention. Loading... By entering your email address and clicking Submit, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy). ![pixalate-logo-white](https://www.pixalate.com/hubfs/Blog_V2_08_26_2016/logo/Pixalate_Logo_WHITE.png) ##### Contact Us12 Loading... ![pixalate-logo-white](https://www.pixalate.com/hubfs/Blog_V2_08_26_2016/logo/Pixalate_Logo_WHITE.png) ##### Download GSTI Loading... Schedule your demo today Please complete all fields Loading... By entering your email address and clicking Submit, you are agreeing to our [Terms of Use](https://www.pixalate.com/terms) and [Privacy Policy](https://www.pixalate.com/privacypolicy). * * * * *