COPPA sign up flow: If no parent verifies user sign up within a certain period of time, delete account

[threeqube]

Related to the COPPA sign up flow issue, https://github.com/mozilla/CSOL-site/issues/59 we need to accommodate for < 13 signups that never get parental verification. Those unverified by parent or guardian must be deleted.

[threeqube]

As per discussion with @cmcavoy and @andrewhayward, will send warning notification after 7 days of < 13 child signup to parent. After 10 days if still no account verification by parent, account will be deleted.

I think the above is what we agreed on but I think 10 days seems very soon. We should send notification to parent after 7 days. But I think we should perhaps delete the account after 14 days or something if no further response from parent.

[iamjessklein]

@threeqube agreed. I wouldn't want the account up past 2 weeks though if the parent has not agreed to use. In terms of notifications, the learner should be getting notifications whenever they log in during the 10 day period to inform them that they need guardian approval. Additionally, the parent should basically be reminded on day 3, 7 and then a final warning on day 9.

[threeqube]

:+1:

[stenington]

A warning after 7 days implies some sort of daily job to check for unverified < 13 accounts that would run against the DB. I don't know that we've done this before, so I would suggest we allot extra time for the implementation. In the Backpack, we delayed delivering notification of revoked badges because the challenge of this same thing out seemed big, so on the plus side if we do it here and are happy with the solution, we can probably reuse part of it there.

[threeqube]

Sounds good. We need to have this in place for CSOL.

[threeqube]

@cmcavoy I'm fairly certain this has been implemented but just wanted to double check.