“Free online games for kids” is one of the sketchiest searches a parent can run. Most results are free the way a casino buffet is free — the game is the bait, and the business is ads, data, or nagging your child toward a purchase. The fix is not avoiding free games; it is judging them in two minutes flat. Run any site through this checklist before your kid gets attached.
The checklist
- No personalised ads, and none inside gameplay — a site aimed at children should flag its ad requests as child-directed (contextual only, no behavioural profiling), and should never put an ad where a mis-tap lands mid-game
- No chat with strangers — no open text chat, voice, or friend requests from unknown players
- Nothing to install — runs in the browser; download buttons on a “free game” site are how malware meets your laptop
- No dark patterns — no countdown timers, guilt streaks, or “your friend beat you, pay to catch up” nudges
- A privacy policy that names what is collected — in plain words, not lawyer fog
- An account owned by the parent, or no account at all — a child should never be the customer of record
- An exit the parent controls — fullscreen kid modes should need a deliberate adult gesture to leave
Ads: the distinction that actually matters
“Are there ads?” is the wrong question; “what kind, and where?” is the right one. Free games cost money to run, and the honest ways to fund them are subscriptions, ads, or both. What separates a decent site from a predatory one is whether ads are *personalised* — built on a profile of your child's behaviour — and whether they sit *inside* the play. Under COPPA, a child-directed site must flag its ad requests so no behavioural profile is built; contextual ads chosen from the page itself are the compliant kind. A banner below the game is a business model. An interstitial between levels, a reward-video nag, or a profile following your kid around the web is a red flag.
Chat is the biggest actual risk
Content panics come and go, but unsupervised contact is the risk with teeth. The test of a well-designed kids’ multiplayer game is that strangers cannot talk to your child, full stop. TotType’s Online Race shows the safe pattern: two kids race across two devices by sharing a temporary 4-letter code — no chat, no names, no profiles visible to anyone. Multiplayer without a channel for contact.
COPPA in one minute
COPPA is the US law covering kids under 13 online. The heart of it: sites cannot collect personal information from young children — names, contact details, precise location, behavioral ad profiles — without verifiable parental consent. Practical translation for your checklist: if a “free” game asks your seven-year-old for an email address, real name, or birthday to play, walk away. Well-built kids’ sites collect from parents, or nobody.
How TotType measures up, honestly
Judge us by the same list. The keyboard playground needs no account and stores nothing on our servers — keystrokes never leave the browser. The arcade does require a free account to post scores, and that account is a parent email; kids’ profiles are nicknames only, never real names, birthdays, or photos. We do show ads, and here is exactly how: every request on a page a child can reach is flagged child-directed, so it is contextual only — never personalised, never building a profile of your child — and ad slots render below the play area, never over a game, with no interstitials and no reward-video nags. Nothing to install, either. And one honest limit: no browser can intercept OS-level keys (PrintScreen, Cmd+Q, the Windows key), so the fullscreen lock is strong but not absolute — we would rather tell you that than let you assume otherwise.
Plans, the FAQ, and everything paid-versus-free live on the parents page; teachers running a shared classroom device can use the free class console to keep every student on their own profile. Two minutes with a checklist beats an hour of reviews — and any site that fails it has told you everything you need to know.