Worry about stranger contact.
Of parents of 3–17-year-olds who game online, in Ofcom’s UK research.

THE CONSENT ENGINE FOR GAMES
We turn family permission into
rules a game can enforce.
Valvur is building the consent engine for game publishers: connect a guardian, approve specific features and return a decision the game can enforce. Developers pay per validation. Families join free.

THE PROBLEM · TRUST MUST BECOME A WORKING PERMISSION
Of parents of 3–17-year-olds who game online, in Ofcom’s UK research.
Concern does not consistently translate into a practical boundary.
COPPA penalty in the FTC’s 2022 Epic Games settlement, separate from $245M in refunds.
Each publisher must connect age assurance, guardian authority, feature permissions and enforcement. A checkbox does not complete that chain. A confusing flow can also lose the family before play begins.
WHY NOW · EU KIDS ACT
The EU’s September 2026 proposal puts online games, video-sharing services and AI companions directly in scope. Valvur expects 2027 to be a crucial readiness year. Waiting for the final deadline leaves less time to build, integrate and test.
Draft Article 15 calls for guardian tools in online games, with under-13 access enabled and controlled through them. Article 20 addresses usable guardian tools. Valvur’s engine is designed to connect those choices to enforceable permissions.
Read the EU proposal ↗That is the proposed general application period in Article 43. Valvur is planning for expected application in 2027. The final date depends on adoption, publication and the text agreed by Parliament and Council.
Follow the legislative procedure ↗Our planning expectation—not a confirmed statutory start date. Prepare the product, publisher integration and evidence now.
As of 30 October 2026, COM(2026)681 is a proposal, not enacted law. Article 43 contains exceptions: Article 5 at entry into force; Articles 33 and 35 after 12 months. Existing COPPA and DSA obligations already support demand. The separate US KIDS Act is a further policy signal. Consent does not override legal prohibitions or replace safety-by-design obligations.
THE PARADIGM SHIFT
“Trust is the most important asset in the current world.”
Yuval Noah Harari · interview with Daniel Stach
Children want to participate. Parents want confidence. Games need to know what is permitted. Valvur connects these needs through explicit, understandable and revocable consent.
Our ambition is ISOFIX for the AI era: a common safety connection that many services can adopt. It starts with a focused product developers can integrate and families can understand.
FROM AWARENESS TO CONSENT TO REACTION
Education prepares the family. Consent connects them to a service. Protection and recovery help when that trust is tested.
Age-appropriate learning, safety quests and conversation guidance help parents and children agree what feels right.
Free core experienceLink child and guardian. Explain the request. Approve specific features. Let the game enforce the resulting permissions.
Developer-funded validationGuide, alert and support recovery. Optional protection and insurer-backed cover extend the relationship after harm.
Premium and partner roadmap↳ Recovery informs the next conversation. Trust can grow after a difficult moment.
EXPLORE VALVUR CONNECT
See the parent, child and game move together: build digital confidence, connect a game, approve permissions and change them at any time.
Complete a safety challenge and see learning turn into progress.
Interactive product demo · sample family and game. The insurance journey shows a planned partner offering.
Open full demo ↗Swipe across the demo to explore all three screens, or open the full demo.
A SIMPLE CONNECTION WITH CLEAR RESPONSIBILITIES
User, service and permission scope
Age and guardian assurance
Applicable permission
Policy, expiry and revocation
Allow with scope, ask a guardian or decline
Decision + evidence
A scoped response and an auditable receipt.
Privacy by design
Keep sensitive identity documents out of the game.
Integration target
API/SDK with change notifications. In development.
THE BUSINESS MODEL
A publisher pays for a completed, scoped validation. Proposed volume bundles and minimum commitments make usage predictable.
Families get core consent, digital resilience and trust-building guidance free.
Parents pay for extended tools and content, with active protection planned. Optional partner-underwritten insurance adds a future distribution commission.
THE RELATIONSHIP CONTINUES AFTER HARM
Our planned recovery pathway helps families report an incident, secure an account, request asset recovery and reach qualified support. Optional insurance can help with covered losses and services.
Partner roadmap. Insurance requires an underwriting partner and appropriate distribution arrangements. Availability, exclusions, limits and claims decisions depend on the policy. No recovery or payout is guaranteed.
Explain the concern and help the family take the next safe step.
Assist reporting and recovery requests, with referrals when specialist help is needed.
Connect eligible families to an insurer’s claims process for covered harm.
EXPERIENCE BEFORE THE REGULATORY MOMENT
Legacy Passport.GG gamer IDs
Countries reached
Federations in the network
Grants and investment
We successfully completed a pilot with the Estonian Cybersecurity Competence Center.
We are now supporting a project involving a law enforcement agency.
Child app, learning experience, parental web interface and gamer-identity heritage.
Parent–child linking, web consent, developer pilot integration, permission evidence and revocation.
Mobile consent shortcut, active Patrol, insurance partners, media and AI services.
€1.25M SEED ROUND
We are raising €1.25M to ship the developer integration, convert two paid pilots and target three paying publishers within 12 months of funding. The operating milestone is one million billable validations per month with positive variable contribution.
Epic KWS offers free parent verification and established consent tools. k-ID offers age-adaptive permissions and a family portal. Valvur’s wedge is the family relationship around consent: understandable learning, scoped permissions and continued support. Existing family and gaming experience gives us a starting point. Paid pilots will test whether this produces better completion and support outcomes at an attractive price.
No. Existing child-privacy and safety duties already create demand. The EU KIDS Act is the main acceleration thesis; expected 2027 application is our planning assumption, not an adopted deadline. Publisher value also has to stand on current duties, usable permissions and demonstrated product economics.
A validation is a completed server-side validation for a user, service and permission scope, with justified revalidation when permissions change or expire. Billing should deduplicate retries and distinguish lightweight checks from first-time assurance costs.
No blanket consent. Assurance may be reused where appropriate, but each service, purpose and feature must have the relevant authorization. Developers must enforce decisions and respond to expiry and withdrawal. Consent cannot override legal prohibitions.