How does the service determine users' ages? Is the method proportionate and privacy-preserving? 2. **Default settings** — Are privacy-protective settings on by default for young users? 3. **Design audit** — Does the service use dark patterns, engagement-maximizing features, or variable reward schedu