Try API

Common Sense Privacy Program

Beta

by Common Sense Media

CSM's Pass/Warning/Fail privacy evaluations and Privacy Seal — enforced at the app and DNS layer.

6 rules

Ages 0–17

About this movement

The Common Sense Privacy Program evaluates apps, websites, and EdTech products against a 150+ question privacy rubric, producing a composite 0–100 score, a Pass / Warning / Fail tier, and — for the strongest products — a Common Sense Privacy Seal. Dimensions include Data Sold, Data Shared for Third-Party Marketing, Behavioral Tracking, and Safe Interactions. As a Phosra standard — subject to a pending CSM design-partner agreement — the Privacy Program maps onto tier gates, score thresholds, per-dimension floors, and optional Seal-only walled-garden mode. Unrated apps fall back to a parent-configurable default. Data minimization and telemetry-host stripping run at the router/DNS layer to enforce the spirit of a Pass rating even where the app itself is non-compliant.

Coming soon

This movement is not yet available for adoption. Join the waitlist to be notified when it launches.

Join Waitlist

How Phosra Enforces Common Sense Privacy Program

Common Sense Privacy Program rules mapped to the Phosra API — enforce them individually or adopt the entire movement in one call.

Common Sense Privacy Program

Adopt Entire Movement

Enforce all 6 rules from Common Sense Privacy Program across every connected platform with a single API call.

POST /v1/enforcement/movements

bash

curl -X POST https://api.phosra.com/v1/enforcement/movements \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
    "child_id": "ch_emma_01",
    "movement_id": "common-sense-privacy-program",
    "enforce_all_rules": true
  }'

Privacy tier gate

Csm Privacy Tier Gate

csm_privacy_tier_gate

Enforces the csm privacy tier gate rule via the Phosra API.

POST /v1/rules — Privacy tier gate

bash

curl -X POST https://api.phosra.com/v1/rules \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
      "child_id": "ch_emma_01",
      "rule_category": "csm_privacy_tier_gate",
      "value": "Block Fail; warn Warning; allow Pass",
      "platforms": [
          "*"
      ]
  }'

Numeric score floor

Csm Privacy Score Threshold

csm_privacy_score_threshold

Enforces the csm privacy score threshold rule via the Phosra API.

POST /v1/rules — Numeric score floor

bash

curl -X POST https://api.phosra.com/v1/rules \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
      "child_id": "ch_emma_01",
      "rule_category": "csm_privacy_score_threshold",
      "value": "Parent-tunable 0–100",
      "platforms": [
          "*"
      ]
  }'

Per-dimension floor

Csm Privacy Dimension Gate

csm_privacy_dimension_gate

Enforces the csm privacy dimension gate rule via the Phosra API.

POST /v1/rules — Per-dimension floor

bash

curl -X POST https://api.phosra.com/v1/rules \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
      "child_id": "ch_emma_01",
      "rule_category": "csm_privacy_dimension_gate",
      "value": "e.g. Data Sold must be Pass",
      "platforms": [
          "*"
      ]
  }'

Seal-only walled garden

Csm Privacy Seal Required

csm_privacy_seal_required

Enforces the csm privacy seal required rule via the Phosra API.

POST /v1/rules — Seal-only walled garden

bash

curl -X POST https://api.phosra.com/v1/rules \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
      "child_id": "ch_emma_01",
      "rule_category": "csm_privacy_seal_required",
      "value": "Privacy Seal required",
      "platforms": [
          "*"
      ]
  }'

Unrated-app fallback

Csm Privacy Unrated Default

csm_privacy_unrated_default

Enforces the csm privacy unrated default rule via the Phosra API.

POST /v1/rules — Unrated-app fallback

bash

curl -X POST https://api.phosra.com/v1/rules \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
      "child_id": "ch_emma_01",
      "rule_category": "csm_privacy_unrated_default",
      "value": "Parent-configurable default",
      "platforms": [
          "*"
      ]
  }'

Telemetry host strip

Data Minimization Enforce

data_minimization_enforce

Enforces the data minimization enforce rule via the Phosra API.

POST /v1/rules — Telemetry host strip

bash

curl -X POST https://api.phosra.com/v1/rules \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{
      "child_id": "ch_emma_01",
      "rule_category": "data_minimization_enforce",
      "value": "Router/DNS-layer enforcement",
      "platforms": [
          "*"
      ]
  }'

Included rules

When adopted, these rules are automatically enforced across all connected platforms.

Privacy tier gate

Block Fail; warn Warning; allow Pass

Numeric score floor

Parent-tunable 0–100

Per-dimension floor

e.g. Data Sold must be Pass

Seal-only walled garden

Privacy Seal required

Unrated-app fallback

Parent-configurable default

Telemetry host strip

Router/DNS-layer enforcement

privacycsmratingsdata minimizationedtechpartnership

Related Legislation

Laws and regulations that share rule categories with Common Sense Privacy Program.

FTC COPPA Rule

The FTC's COPPA enforcement rule requiring verifiable parental consent for data collection on children under 13. The FTC finalized major amendments in January 2025 (5-0 vote), published in the Federal Register on April 22, 2025, with legal effect June 23, 2025 and a full compliance deadline of April 22, 2026. The 2025 amendments add mandatory information security programs, data retention/deletion policies, enhanced direct notice requirements, expanded personal information definitions (biometrics, government IDs), new consent methods, and separate consent for third-party data sharing.

United States (Federal)|1 shared rule

CA SB 976

Bans addictive feeds and notifications during school hours for minors. Platforms must default to chronological feeds.

California, United States|1 shared rule

MD ODPA

Comprehensive consumer-privacy statute built around a strict data-minimization model — one of the most protective in the US. Bans sale of sensitive personal data, bars targeted advertising to known minors under 18, and limits data collection to what is reasonably necessary to deliver the product or service.

Maryland, United States|1 shared rule

Ready to protect your family?

Adopt Common Sense Privacy Program and let Phosra enforce it across every device and platform automatically.

Get Started Free Browse All Movements